Documentation

Source-of-truth docs, references, plans, and product material across Harbor surfaces.

Docs / Flows And Authoring
Flows And Authoring

Target API Backlog Top 100

This is a curated Harbor-target backlog, not a literal universal industry leaderboard.

connectorsbacklogports
Source: HARBOR_TARGET_API_BACKLOG_TOP_100.md

# Harbor Target API Backlog Top 100

This is a curated Harbor-target backlog, not a literal universal industry leaderboard.

It is intended to answer:

  • which APIs are worth turning into Harbor Ports next
  • what safe http_api defaults each one needs
  • which first actions should become Harbor drafts

This backlog is informed by current API catalog/discovery patterns and mainstream developer tooling trends. In particular, Postman's current API Network and 2025 API awards indicate strong demand around developer tools, collaboration, communications, and AI APIs, and Postman's 2025 State of the API report reinforces that API strategy is increasingly agent strategy.

Sources:

  • Postman API Network: https://www.postman.com/api-network/
  • Postman Developers' Choice / API awards: https://www.postman.com/postcon/2025/api-awards/
  • Postman State of the API 2025: https://www.postman.com/state-of-api/

How to read this list

Each target includes:

  • API / publisher
  • default Harbor port shape
  • likely auth header pattern
  • starter Harbor Actions

Unless stated otherwise, the default Harbor port kind is:

  • http_api

Email, Messaging, And Collaboration

  1. Gmail API (Google) - Authorization: Bearer - starter actions now seeded in Dock: get-profile, list-labels, list-messages, list-threads, list-drafts, list-send-as-identities, get-auto-forwarding, get-imap-settings, get-language-settings, get-pop-settings, get-vacation-settings, create-draft, send-message, create-label, create-filter, create-forwarding-address.
  2. Google Drive API (Google) - Authorization: Bearer - starter actions now seeded in Dock on Harbor's Action Model: list-files, get-file-metadata, search-files, list-shared-drives, get-shared-drive, get-start-page-token, list-file-permissions, create-folder, copy-file.
  3. Google Sheets API (Google) - Authorization: Bearer - starter actions now seeded in Dock: get-spreadsheet, read-range, append-row, update-range, clear-range, batch-update.
  4. Google Calendar API (Google) - Authorization: Bearer - starter actions now seeded in Dock: list-calendar-list, list-settings, get-colors, get-primary-calendar, list-primary-events, list-primary-acl, query-freebusy, create-primary-event, create-calendar.
  5. Microsoft Graph Mail (Microsoft) - Authorization: Bearer - starter actions now seeded in Dock: get-profile, list-messages, send-mail.
  6. Microsoft Graph Calendar (Microsoft) - Authorization: Bearer - starter actions now seeded in Dock: list-calendars, list-events, create-event.
  7. Notion API (Notion) - Authorization: Bearer - starter actions: search, get-page, create-page.
  8. Airtable Web API (Airtable) - Authorization: Bearer - starter actions now seeded in Dock: list-records, get-record, create-record.
  9. Slack Web API (Slack) - Authorization: Bearer - starter actions now seeded in Dock: list-conversations, list-users, post-message.
  10. Discord Bot API (Discord) - Authorization: Bot - starter actions now seeded in Dock: list-guilds, list-channels, create-message.

Developer Tools And Incident Response

  1. GitHub REST API (GitHub) - Authorization: Bearer - Dock starter actions now seeded: get-authenticated-user, list-my-issues, list-my-repositories, list-my-notifications, list-my-organizations, get-repository, list-repository-issues, get-issue, list-issue-comments, list-pull-requests, get-pull-request, list-branches, get-branch, list-commits, get-commit, compare-two-commits, get-repository-content, create-repository, create-issue, create-issue-comment, update-issue, create-pull-request, merge-pull-request, create-or-update-file-contents.
  2. GitLab API (GitLab) - Authorization: Bearer - starter actions now seeded in Dock: list-projects, list-merge-requests, create-issue.
  3. Jira Cloud API (Atlassian) - Authorization: Bearer - starter actions now seeded in Dock: search-issues, get-issue, create-issue.
  4. Confluence Cloud API (Atlassian) - Authorization: Bearer - starter actions now seeded in Dock: search-pages, get-page, create-page.
  5. Linear API (Linear) - Authorization: Bearer - deferred for now because Linear is GraphQL-first and Harbor's current Dock http_api model lacks safe static body templates for fixed operation seeding.
  6. Sentry API (Sentry) - Authorization: Bearer - starter actions now seeded in Dock: list-projects, list-issues, resolve-issue.
  7. Datadog API (Datadog) - DD-API-KEY plus app key later - starter actions: list-monitors, query-events, create-downtime.
  8. New Relic API (New Relic) - API-Key - deferred for now because New Relic's recommended observability and configuration surface is NerdGraph GraphQL, and Harbor's current Dock http_api model lacks safe static body templates for fixed operation seeding.
  9. PagerDuty API (PagerDuty) - Authorization: Token token= - starter actions: list-incidents, get-incident, create-note.
  10. Jenkins Remote API (Jenkins) - token-based basic auth - starter actions now seeded in Dock: list-jobs, get-build, trigger-job.

CRM, Support, And Customer Ops

  1. Salesforce REST API (Salesforce) - Authorization: Bearer - starter actions now seeded in Dock: describe-sobjects, query, create-record.
  2. HubSpot CRM API (HubSpot) - Authorization: Bearer - starter actions now seeded in Dock: search-contacts, get-contact, create-contact.
  3. Zendesk API (Zendesk) - Authorization: Bearer - starter actions now seeded in Dock: list-tickets, get-ticket, create-ticket.
  4. Intercom API (Intercom) - Authorization: Bearer - starter actions: list-conversations, get-contact, create-note.
  5. ServiceNow Table API (ServiceNow) - Authorization: Bearer or basic auth - starter actions: query-table, get-record, create-record.
  6. Freshdesk API (Freshworks) - API key auth - starter actions: list-tickets, get-ticket, create-ticket.
  7. Pipedrive API (Pipedrive) - x-api-token or OAuth token - starter actions: list-deals, get-deal, create-note.
  8. Zoho CRM API (Zoho) - Authorization: Zoho-oauthtoken - starter actions: list-modules, search-records, create-record.
  9. Freshsales API (Freshworks) - API key auth - starter actions: list-contacts, get-contact, create-contact.
  10. Close API (Close) - Authorization: Basic or Bearer token - starter actions: list-leads, get-lead, create-task.

Communications And Transactional Email

  1. Twilio Messaging API (Twilio) - basic auth with SID/token - starter actions: list-messages, send-sms, get-message.
  2. Twilio Voice API (Twilio) - basic auth with SID/token - starter actions: create-call, list-calls, get-call.
  3. SendGrid API (Twilio SendGrid) - Authorization: Bearer - starter actions: send-email, list-senders, get-stats.
  4. Mailgun API (Mailgun) - basic auth / API key - starter actions: send-email, list-domains, get-stats.
  5. Postmark API (Postmark) - X-Postmark-Server-Token - starter actions: send-email, list-templates, get-stats.
  6. Vonage API (Vonage) - API key/secret or JWT - starter actions: send-sms, list-messages, get-message-status.
  7. Sinch SMS API (Sinch) - Authorization: Bearer - starter actions: send-sms, get-delivery-report, list-groups.
  8. Telnyx API (Telnyx) - Authorization: Bearer - starter actions: send-message, list-messages, list-phone-numbers.
  9. WhatsApp Cloud API (Meta) - Authorization: Bearer - starter actions: send-message, list-templates, get-phone-number.
  10. Mailchimp Marketing API (Intuit Mailchimp) - basic auth / token - starter actions: list-audiences, get-campaign, create-campaign.

Payments, Commerce, And Marketplace

  1. Stripe API (Stripe) - Authorization: Bearer - starter actions: list-customers, get-payment-intent, create-customer.
  2. PayPal REST API (PayPal) - Authorization: Bearer - starter actions: list-orders, get-order, create-order.
  3. Square API (Square) - Authorization: Bearer - starter actions: list-locations, list-customers, create-customer.
  4. Adyen API (Adyen) - X-API-Key - starter actions: payments, get-payment-details, list-stored-payment-methods.
  5. Braintree API (PayPal) - API key/private key flow - starter actions: find-customer, create-customer, create-transaction.
  6. Shopify Admin API (Shopify) - X-Shopify-Access-Token - starter actions: list-products, get-order, create-product.
  7. WooCommerce REST API (WooCommerce) - consumer key/secret - starter actions: list-products, get-order, create-order-note.
  8. BigCommerce API (BigCommerce) - X-Auth-Token - starter actions: list-products, get-orders, create-customer.
  9. eBay Sell API (eBay) - Authorization: Bearer - starter actions: list-orders, get-order, list-inventory-items.
  10. Amazon Selling Partner API (Amazon) - signed auth flow - starter actions: list-orders, get-order, list-inventory-summaries.

Marketing, Ads, And Product Analytics

  1. Google Ads API (Google) - Authorization: Bearer - starter actions: list-customers, search-campaigns, create-budget.
  2. Meta Graph / Marketing API (Meta) - Authorization: Bearer - starter actions: list-ad-accounts, get-campaign, create-ad-set.
  3. LinkedIn Marketing API (LinkedIn) - Authorization: Bearer - starter actions: list-organizations, list-campaigns, create-post.
  4. TikTok Business API (TikTok) - Access-Token header - starter actions: list-advertisers, get-campaigns, create-report.
  5. Reddit API (Reddit) - Authorization: Bearer - starter actions: get-me, list-subreddits, submit-post.
  6. Klaviyo API (Klaviyo) - Authorization: Klaviyo-API-Key or private key - starter actions: list-profiles, list-campaigns, create-event.
  7. Braze API (Braze) - Authorization: Bearer or key header - starter actions: track-users, send-campaign, list-campaigns.
  8. Customer.io API (Customer.io) - Bearer or app key auth - starter actions: list-campaigns, send-event, create-broadcast.
  9. Segment Public API (Twilio Segment) - Bearer token - starter actions: list-sources, get-source, list-destinations.
  10. Mixpanel API (Mixpanel) - service account / token - starter actions: query-events, list-cohorts, create-cohort.

Scheduling, Work Management, And Signatures

  1. Zoom API (Zoom) - Authorization: Bearer - starter actions now seeded in Dock: get-me, list-meetings, create-meeting.
  2. Calendly API (Calendly) - Authorization: Bearer - starter actions now seeded in Dock: list-event-types, list-scheduled-events, cancel-event.
  3. Asana API (Asana) - Authorization: Bearer - starter actions now seeded in Dock: list-projects, list-tasks, create-task.
  4. Trello API (Atlassian) - API key plus token - starter actions: list-boards, list-cards, create-card.
  5. monday.com API (monday.com) - Authorization token - starter actions: list-boards, list-items, create-item.
  6. ClickUp API (ClickUp) - Authorization token - starter actions: list-teams, list-tasks, create-task.
  7. Todoist REST API (Doist) - Authorization: Bearer - starter actions now seeded in Dock: list-projects, list-tasks, create-task.
  8. Harvest API (Harvest) - Authorization: Bearer plus account ID - starter actions: list-projects, list-time-entries, create-time-entry.
  9. DocuSign eSignature API (DocuSign) - Authorization: Bearer - starter actions: list-accounts, list-envelopes, create-envelope.
  10. Dropbox Sign API (Dropbox) - Authorization: Basic or Bearer - starter actions: list-signature-requests, get-signature-request, send-signature-request.

Storage, Infra, And Identity

- Deferred for now. DigitalOcean's API surface is much larger than the current starter manifest and will be handled as a dedicated team completeness pass instead of incremental one-off expansion.

  1. Dropbox API (Dropbox) - Authorization: Bearer - starter actions now seeded in Dock: list-folder, get-metadata, create-folder.
  2. Box API (Box) - Authorization: Bearer - starter actions now seeded in Dock: list-folder-items, get-file, create-folder.
  3. Microsoft Graph Files / OneDrive (Microsoft) - Authorization: Bearer - starter actions: list-drive-items, get-item, create-folder.
  4. Cloudflare API (Cloudflare) - Authorization: Bearer - full zone-scoped Dock pass completed with 69 actions covering zones, zone settings, zone holds, subscriptions and plans, DNSSEC, DNS records, DNS scans, DNS analytics, secondary DNS, cache controls, zone tags, and security.txt. See apps/hub/catalog/integrations/cloudflare/ActionMap.md and apps/hub/catalog/integrations/cloudflare/TechnicalLimitations.md.
  5. DigitalOcean API (DigitalOcean) - Authorization: Bearer - starter actions now seeded in Dock: list-droplets, get-droplet, list-regions, create-tag.
  6. Vercel API (Vercel) - Authorization: Bearer - starter actions now seeded in Dock: list-projects, get-deployments, create-deployment.
  7. Netlify API (Netlify) - Authorization: Bearer - starter actions now seeded in Dock: list-sites, get-site, list-site-deploys, create-build-hook.
  8. Supabase Management API (Supabase) - Authorization: Bearer - starter actions: list-projects, get-project, create-branch.
  9. Auth0 Management API (Okta/Auth0) - Authorization: Bearer - starter actions: list-clients, list-users, create-user.
  10. Okta API (Okta) - Authorization: SSWS - starter actions: list-users, get-user, deactivate-user.

AI, Search, And Retrieval

  1. OpenAI API (OpenAI) - Authorization: Bearer - broad Harbor-safe action inventory now seeded in Dock across models, responses, embeddings, files, images, moderations, batches, uploads, vector stores, fine-tuning, and legacy completions.
  2. Anthropic API (Anthropic) - x-api-key - starter actions: list-models, create-message, count-tokens.
  3. Cohere API (Cohere) - Authorization: Bearer - phased large-API pass completed with 37 Harbor-safe actions across models, inference, embed jobs, batches, dataset reads, connectors, fine-tuning, tokenization, and legacy classify or summarize flows. Multipart transcription and dataset creation plus SSE-only legacy streaming remain documented in apps/hub/catalog/integrations/cohere/TechnicalLimitations.md.
  4. Mistral API (Mistral) - Authorization: Bearer - starter actions now seeded in Dock: list-models, chat-complete, embed-text.
  5. Perplexity API (Perplexity) - Authorization: Bearer - starter actions: chat-complete, search-answer, list-models.
  6. Pinecone API (Pinecone) - Api-Key - starter actions: list-indexes, query-index, upsert-vectors.
  7. Weaviate Cloud API (Weaviate) - Authorization: Bearer or API key - starter actions: list-collections, query-objects, insert-object.
  8. Algolia API (Algolia) - X-Algolia-API-Key and app ID - starter actions: list-indices, search-index, save-object.
  9. SerpAPI (SerpAPI) - api_key query param today - starter actions: google-search, news-search, maps-search.
  10. Tavily API (Tavily) - Authorization: Bearer - starter actions now seeded in Dock: search, extract, crawl.

Data, Finance, Design, And Misc

  1. Snowflake SQL API (Snowflake) - Bearer/JWT auth - starter actions: query-sql, get-query-status, cancel-query.
  2. BigQuery REST API (Google Cloud) - Authorization: Bearer - starter actions now seeded in Dock: list-datasets, run-query, get-job.
  3. Redshift Data API (AWS) - signed AWS auth - starter actions: execute-statement, describe-statement, cancel-statement.
  4. Tableau REST API (Tableau) - X-Tableau-Auth - starter actions: list-sites, list-workbooks, refresh-workbook.
  5. Power BI REST API (Microsoft) - Authorization: Bearer - starter actions: list-groups, list-reports, refresh-dataset.
  6. Figma REST API (Figma) - X-Figma-Token - large-API planning pass completed. Current Dock manifest still exposes starter actions get-file, get-comments, list-team-projects, and apps/hub/catalog/integrations/figma/ActionMap.md now maps 45 supportable actions across 2 phases. GET /v1/me is deferred pending auth-model widening beyond the current personal-token shape.
  7. Miro REST API (Miro) - Authorization: Bearer - starter actions: list-boards, get-board, create-sticky-note.
  8. QuickBooks Online API (Intuit) - Authorization: Bearer - starter actions: query-customers, get-invoice, create-invoice.
  9. Xero API (Xero) - Authorization: Bearer - starter actions: list-organizations, list-invoices, create-contact.
  10. Plaid API (Plaid) - PLAID-CLIENT-ID plus secret today - starter actions: get-item, get-accounts, transactions-sync.

If you want the highest-signal Harbor coverage first, start here:

  1. GitHub REST API
  2. Gmail API
  3. Slack Web API
  4. Notion API
  5. Google Drive API
  6. Stripe API
  7. HubSpot CRM API
  8. Jira Cloud API
  9. Zoom API
  10. OpenAI API

Populate Dock / Hub in this order:

  1. Developer tools
  2. Collaboration and docs
  3. CRM and support
  4. Communications and messaging
  5. Payments and commerce
  6. AI and search

That ordering gives Harbor the best balance of:

  • broad usefulness
  • easy operator testing
  • clear action boundaries
  • low-to-medium implementation risk