HttpRequest

Calls an external HTTP API.

Fields

FieldTypeRequiredWhat it does
urlhybridyesFull URL. With {{expressions}} it is text; with none it is a JSONata expression, so a fixed URL must be quoted: "https://api.example.com/orders".
methodone of: GET, POST, PUT, PATCH, DELETEDefaults to GET.
headershybridHeaders as a JSON string, for example "{"Authorization":"Bearer {{variables.TOKEN}}"}". Content-Type is added automatically when there is a body.
paramshybridQuery parameters as a JSON string, for example "{"page":"2","q":"{{input.body.query}}"}". They are added to the URL and every value is encoded, so this is the safe way to build a query out of expressions.
bodyhybridBody as a JSON string, for example "{"text":"{{outputs.step.text}}"}". Omit for GET.
bodyTypeone of: json, form, multipartHow the body is sent. Defaults to json. Use form for application/x-www-form-urlencoded (OAuth token endpoints and older APIs) and multipart for multipart/form-data. For form and multipart the body must be an object of fields; nested values are written as JSON text and Content-Type is set for you.

Output

request, response.status, response.headers, response.data

Notes

Times out after 30 seconds unless timeoutMs says otherwise. Only public http(s) hosts: localhost, private networks and addresses with a username are refused, redirects are checked the same way (at most 5) and Authorization is not forwarded to another origin. Answers over 10 MB fail.