How do I check whether a specific target is allowed?

Send a GET to it through the relay and read the error code. A blocked_target or dns_failure response means the target was refused before any connection was opened, and no trips were charged.

Can I upload a file with curl?

Encode the file as base64 and send it in body_base64. That keeps the relay request a single JSON object and forwards the bytes as application/octet-stream.

curl · shell

Use Backfire from the command line with curl

The fastest way to confirm a key works and see exactly what an upstream returns is a curl call. It is also the shortest reproducible artefact to paste into an incident thread.

Notes for this client

Pipe the response through jq to read envelope.ok and envelope.upstream.status.
Use --max-time so the shell call cannot hang indefinitely.
Add -i when you need the relay HTTP status alongside the envelope.
Everything the examples in the docs show is exactly these flags.

Working example

curl

curl -sS https://backfireapi.base44.app/functions/forward \
  -H "Authorization: Bearer $BACKFIRE_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "url": "https://api.github.com/zen",
    "method": "GET",
    "timeout_ms": 8000
  }' | jq '{ok, status: .upstream.status, trips: .meta.trips_charged, left: .quota.remaining}'

Questions about this

Other languages

Node.js Python Go PHP Ruby Health checks CI and tests invalid_key

Try it with 5,000 free trips.

No card, no subscription, and the balance never expires.

Create an account Read the docs