feat: Add API Proxy documentation and update overview and permissions

Author: boringContributor

docs/apps/proxies.md docs/apps/components/api-proxy.mddocs/apps/proxies.md renamed to docs/apps/components/api-proxy.md

@@ -1,12 +1,12 @@
 ---
-title: API Proxies
+title: API Proxy
 hide_title: true
-sidebar_position: 7
+sidebar_position: 6
 ---
 
-# API Proxies
+# API Proxy
 
-API Proxies let your app call external APIs without exposing credentials to the browser. The proxy runs server-side — API keys, OAuth tokens, and secrets never reach the client.
+API Proxy components let your app call external APIs without exposing credentials to the browser. The proxy runs server-side — API keys, OAuth tokens, and secrets never reach the client.
 
 This is especially useful for **client-facing components** like journey blocks, portal blocks, and capabilities that need to call external APIs.
 
@@ -29,9 +29,9 @@ External API (https://api.example.com/products)
 
 ## Quick start
 
-### 1. Configure a proxy in the App Builder
+### 1. Add an API Proxy component to your app
 
-Go to your app's **Proxies** section and add a target:
+In the App Builder, add a new **API Proxy** component and configure:
 
 - **Name** — a unique identifier (e.g. `products-api`)
 - **Target URL** — the base URL of the external API (must be HTTPS)

docs/apps/components/overview.md

@@ -51,13 +51,25 @@ External Product Catalog components integrate third-party product catalogs into
 Use cases: Custom product catalogs, journey products, journey product recommendations
 ```
 
-## On the Horizon
+### [Custom Workflow Task](/docs/apps/components/custom-action)
 
-The epilot platform continues to evolve, with new component types planned for future releases:
+Custom Workflow Tasks extend epilot's automation engine with your own logic. You can either call an external endpoint (webhook-style) or run TypeScript code in a sandboxed environment directly within a workflow task.
+
+```
+Use cases: Third-party integrations, data syncing, custom processing steps in workflows
+```
+
+### [API Proxy](/docs/apps/components/api-proxy)
+
+API Proxy components let your app call external APIs without exposing credentials to the browser. The proxy runs server-side, injecting authentication and signing requests so secrets never reach the client.
+
+```
+Use cases: Secure external API calls, OAuth integrations, credential-protected endpoints
+```
 
-### Custom Automation Tasks
+## On the Horizon
 
-These will allow you to define specialized tasks that can be triggered within epilot's automation workflows, enabling custom processing or integration steps in automated sequences.
+The epilot platform continues to evolve, with new component types planned for future releases:
 
 ### Custom Journey Design Elements
 
@@ -71,7 +83,7 @@ Have an idea for a new component type? We welcome feedback from the developer co
 1. **Evaluate Your Need**: Consider if existing component types could address your use case
 2. **Define the Integration Point**: Identify where in epilot your component would integrate
 3. **Describe the Value**: Outline the problems it would solve for epilot users
-4. **Submit a Request**: [Contact us](https://developers.epilot.cloud/contact) with your proposal
+4. **Submit a Request**: [Contact us](mailto:support@epilot.cloud) with your proposal
 
 Our product team regularly reviews component requests and prioritizes them based on community interest and platform direction.
 
@@ -83,7 +95,28 @@ Learn more about [App Surfaces](/docs/apps/app-surfaces) to understand how your
 
 ## Building Your First Component
 
-Ready to create your own component? Each component type has specific requirements and capabilities, but they all follow similar development patterns.
+Ready to create your own component? The fastest way to get started is with the **epilot CLI**:
+
+```bash
+npx epilot app init my-app
+npx epilot app add-component my-block --type CUSTOM_JOURNEY_BLOCK
+```
+
+The CLI manages the full app lifecycle — from scaffolding and validation to deployment and version management. Key commands:
+
+| Command | Description |
+| --- | --- |
+| `epilot app init` | Scaffold a new app project with `manifest.json` |
+| `epilot app add-component` | Add a component from a starter template |
+| `epilot app validate` | Validate your manifest before deploying |
+| `epilot app deploy` | Deploy your app to epilot |
+| `epilot app versions` | List all versions of your app |
+| `epilot app review` | Submit a version for public review |
+| `epilot app export` | Export an existing app as `manifest.json` |
+
+See the [CLI documentation](/docs/cli/commands/app) for the full command reference.
+
+Each component type also has a ready-to-use starter template available in the [app-templates](https://github.com/epilot-dev/app-templates) repository.
 
 <div className="container">
   <div className="row">
@@ -116,6 +149,26 @@ Ready to create your own component? Each component type has specific requirement
         </div>
       </div>
     </div>
+    <div className="col col--6">
+      <div className="card" style={{height: '100%'}}>
+        <div className="card__body">
+          <h3>Custom Workflow Task</h3>
+          <p>Run custom logic in epilot's automation workflows</p>
+          <a href="/docs/apps/components/custom-action" className="button button--secondary button--block">Start Building</a>
+        </div>
+      </div>
+    </div>
+  </div>
+  <div className="row" style={{marginTop: '1.5rem'}}>
+    <div className="col col--6">
+      <div className="card" style={{height: '100%'}}>
+        <div className="card__body">
+          <h3>API Proxy</h3>
+          <p>Call external APIs securely without exposing credentials</p>
+          <a href="/docs/apps/components/api-proxy" className="button button--secondary button--block">Start Building</a>
+        </div>
+      </div>
+    </div>
   </div>
 </div>
 

docs/apps/configure-permissions.md

@@ -44,4 +44,5 @@ Check the specific component documentation for details on how to access permissi
 |---------------------------|-----------------------|
 | Custom Journey Block      | No                   |
 | Portal Extension          | No                   |
-| Custom Action  | Yes                   |
+| Custom Action             | Yes                  |
+| API Proxy                 | No                   |

docs/apps/overview.md

@@ -34,7 +34,9 @@ See the [App Components](/docs/apps/components/overview) section for detailed in
 
 **External Product Catalog**: Components that integrate third-party product catalogs into epilot.
 
-**Custom Workflow Task**: Either call an external endpoint or run your own code in a sandboxed workflow task
+**Custom Workflow Task**: Either call an external endpoint or run your own TypeScript code in a sandboxed workflow task.
+
+**API Proxy**: Call external APIs server-side without exposing credentials to the browser. Supports custom headers, bearer tokens, and OAuth 2.0.
 
 ### Coming Soon