1. Zapier
  2. Your Zapier account
  3. Data privacy & security

Manage Proxy API requests for your Enterprise account

Updated

Proxy API controls let Enterprise admins govern how members use Zapier features that create API requests. Unlike apps with fixed pre-built actions, these requests are created by custom code or AI agents that can call any available API. Learn more about what Proxy API is and how it works.

Available on plans:

Free

Professional

Team

Enterprise

Note

Proxy API controls are in development. Over the coming months, Zapier is rolling out the account-wide and per-app Proxy API controls described in this article.

To request early access to the new controls on your Enterprise account, submit an Enterprise feature request and select Advanced enterprise app controls.

Features that use Proxy API

The following Zapier features use Proxy API:

  • Code by Zapier: Code by Zapier steps can make HTTP requests through the Zapier SDK.
  • Zapier SDK (beta): Custom code sends HTTP requests with zapier.fetch().
  • Sidekick (beta): Sidekick, Zapier's AI assistant, makes API requests to your connected apps as it completes tasks.
  • MCP code actions (early access): Zapier MCP generates and runs JavaScript code when a pre-built action does not support the task.

Proxy API controls

Zapier provides two levels of control for Proxy API requests:

  • Account-wide control: Allows or restricts Proxy API requests from Code by Zapier, Zapier SDK, Sidekick, and MCP code actions across the whole account.
  • Proxy API for an individual app (formerly API Request (beta)): Allows or restricts Proxy API requests for a specific app. You can set this for an individual member, a team, or everyone.

The two controls are separate. The account-wide setting does not change per-app settings, and per-app settings do not depend on the account-wide setting.

Features that are not affected by the account-wide control

Turning off the account-wide Proxy API control does not block these features:

Admins can manage access to these features through app permissions.

Default behavior for Enterprise accounts

Proxy API requests are off by default for Enterprise accounts. An admin must allow Proxy API requests before they can run.

Decide whether to allow Proxy API requests

Consider these factors:

  • Business need: Confirm that members need flexible API access beyond pre-built actions.
  • Security and API access: Review which external APIs members need to access, and check whether your organization's security or compliance policies require approval before enabling.
  • App restrictions: Restrict apps that members should not access through Proxy API.
  • Existing usage: Review which workflows and tools may stop working before turning off the account-wide control.
Example

An admin keeps the account-wide control turned off, so Code by Zapier steps cannot make Proxy API requests. A member who adds a Code by Zapier step that calls the Salesforce API gets a message that the account admin has blocked Proxy API requests.

Separately, the admin uses the per-app control to allow Proxy API for Salesforce for the Sales team only. A Sales team member uses Proxy API for Salesforce in their Zap, and the request goes through. A member outside the Sales team adds the same step, and the request is blocked.

Before you begin

  • You must be an admin, super admin, or owner of an Enterprise account.
  • Review which members and teams need Proxy API access.
  • Review any Code by Zapier features, Zapier SDK requests, Sidekick tasks, or MCP code actions that may depend on Proxy API requests.

Allow or turn off Proxy API requests for your account

  1. In the left sidebar on the Zapier home page, click Admin Center.
  2. In the left sidebar, select Beta features.
  3. Find Proxy API.
  4. Choose an option:
    • To allow requests, click Allow Proxy API.
    • To block requests, click Turn off Proxy API.
  5. Review the confirmation message.
  6. Confirm your choice.

Turning off Proxy API requests takes effect immediately. Any affected request will fail with a message that the account admin has blocked Proxy API requests.

Manage Proxy API requests for an app

  1. In the left sidebar on the Zapier home page, click Admin Center.
  2. In the left sidebar under the Governance section, select app permissions.
  3. Select the app you want to manage.
  4. Select a member, team, or Everyone.
  5. Select the checkbox next to Proxy API. A menu bar will appear at the bottom of the page.
  6. Click Allow or Restrict.
  7. Confirm your choice.

Next steps

Was this article helpful?
0 out of 0 found this helpful

Zapier Early Access

Get access to tomorrow’s no-code automation products and features today. By opting-in to our current and future pre-release products, you’ll work directly with the Zapier product team and join a dedicated community of automation enthusiasts. Learn more about Zapier Early Access