Firecrawl
Fronts the scraping and crawling surface of Firecrawl at https://api.firecrawl.dev: scrape, crawl, map, search, extract, and batch scrape, along with crawl cancellation and id-gated job status. The path following /firecrawl/ is relayed upstream, restricted to those actions:
Admission is default-deny against a fixed allowlist — only the admitted actions go through, and any other path draws a 404 until the endpoint concerned is added to the allowlist. Methods track Firecrawl’s own docs: POST on the action endpoints, GET on the id-gated job-status reads for crawl/batch/extract (errors included), DELETE for crawl cancellation. The usage endpoints under /v2/team/*, plus GET /v2/crawl/active, stay out. Neither PUT nor PATCH appears on any documented endpoint.
Common paths
Credential handling
Firecrawl reads its key from Authorization: Bearer — the very header carrying your gateway token — so rather than stripping that header, the gateway replaces it with the Firecrawl key:
Authorizationis overwritten with Firecrawl’s secret key. Your gateway token stops at the gateway and never travels upstream.- No query-param form of the key exists on Firecrawl’s side, so nothing gets removed from the query string.
Responses
Every response is JSON — screenshot, audio, and video payloads arrive as base64 strings or URLs within that JSON, never as a raw binary body.
Examples
Scrape a URL
Start a crawl
Crawl status
Responses arrive as Firecrawl’s JSON, untouched. Field-level request and response detail lives in Firecrawl’s API reference; the gateway modifies neither.