---
title: "Invoke Forward Proxy"
method: POST
path: "/pci-proxy/forward"
---

# Invoke Forward Proxy

`POST /pci-proxy/forward`

Forwards your request to the destination indicated in the `yuno-proxy-destination-url` header, replacing `{{vaulted_token.<TOKEN>.<field>}}` expressions in the body and header values with real card data inside Yuno's PCI DSS Level 1 environment. The destination's status code, headers, and body are returned unchanged. `GET`, `PUT`, `PATCH`, and `DELETE` are also supported and forwarded verbatim. The full destination (including its path and query string) is specified in `yuno-proxy-destination-url`; a query string on the `/pci-proxy/forward` request itself is rejected. Every proxy response carries a `yuno-proxy-request-id` header; a `401` returned before the request reaches the proxy is the only exception.

## Headers

- `yuno-proxy-destination-url` string, required
- `yuno-proxy-timeout` integer
- `yuno-account-id` string

## Request body

- object

## Response `200`

Response from the destination, passed through unchanged (the actual status code is whatever the destination returned; check `yuno-proxy-destination-status`).

- object — The destination's response body, unchanged.

## Other responses

- `400` — Proxy-originated request error. The `yuno-proxy-destination-status` header is absent because the destination was not called.
- `401` — Authentication failed. Returned before the request reaches the proxy, so it carries no `yuno-proxy-*` headers.
- `403` — The destination is not allowed, or the PCI Proxy is not activated for your organization (production only).
- `413` — Request body over 1 MB.
- `429` — Rate limit exceeded for the account (enforced at the Yuno edge).
- `500` — Unexpected proxy-side error.
- `502` — The destination could not be reached, or (when Yuno is configured service-wide to block rather than redact) its response contained card data.
- `504` — The destination did not respond within the timeout.

---

[API](https://skmtc.net/y/apis/ai-caller.md) · [All operations](https://skmtc.net/y/apis/ai-caller/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/y/ai-caller/revisions/05b629819b49/schema)