Advanced node type: API Call node

API Call node (Enterprise)

The API Call node makes an HTTP request to an external API during the diagnostic flow. Available on Enterprise plan.

Use cases

• Check order status in your e‑commerce system.
• Validate serial number against your CRM.
• Fetch customer tier or subscription details.
• Send diagnostic data to external logging system.
• Trigger a workflow in Zapier/Make.

Configuring an API Call node

1. Drag an API Call node onto the canvas.
2. Configure:
   • Method – GET, POST, PUT, PATCH, DELETE
   • URL – Endpoint (supports variable substitution using {{answers['nodeId']}})
   • Headers – Key‑value pairs (e.g., Authorization: Bearer {{apiToken}})
   • Body – JSON or form data (for POST/PUT/PATCH)
   • Timeout – Milliseconds (default: 5000, max: 30000)
   • Retry on failure – Number of retries (0‑3)
3. Define output variables – Map response fields to session variables for later use.
4. Define error handling – Where to go if API fails (target node).
5. Define success paths – Based on response status code or body values.

Variable substitution

Use {{variable}} in URL, headers, and body:

https://api.example.com/orders/{{answers['q_order_id']}}

Available variables:

• {{answers['nodeId']}} – Answer from a Question node
• {{inputs['nodeId']}} – Value from an Input node
• {{sessionId}} – Current session ID
• {{customerEmail}} – If collected earlier
• {{orgId}} – Your organization ID

Example: Validate serial number

URL: https://api.yourcompany.com/validate?serial={{inputs['i_serial']}}

Headers: X-API-Key: your_api_key

Success paths:

• If response status 200 and body.valid == true → go to 'Valid serial' node
• If response status 200 and body.valid == false → go to 'Invalid serial' node
• If error (timeout, 5xx) → go to 'Error' node

Security notes

• API Call nodes can only call HTTPS URLs (no HTTP).
• Your API keys are stored encrypted in Certorix.
• You can store secrets (API keys, tokens) in Secret store (Company Settings → Secrets) and reference them as {{secret:name}}.
• Certorix does not log request/response bodies (only metadata: URL, status code, duration).