Gong plugin

• Both halves of the key. The access key is the connection’s API key and the secret is its api_key_secret field. In code you can pass accessKey and accessKeySecret to gong() instead.
• API host. Requests go to https://api.gong.io. If Gong shows your company its own base URL, such as https://us-12345.api.gong.io, pass it as baseUrl. The plugin accepts api.gong.io and <name>.api.gong.io and rejects any other host.
• OAuth is a token you bring. authType: 'oauth_2' sends a bearer token as it is. The plugin does not run Gong’s OAuth flow and does not refresh the token, and a Gong token lasts one day. Pass the api_base_url_for_customer value from Gong’s token response as baseUrl.
• IDs are digit strings. Gong IDs are 64-bit numbers, too large for a JavaScript number. Pass them as strings, the way workspaces.list returns them.
• Paging. A list returns records.cursor while more pages exist. Send it back as cursor and keep every other input the same.
• Rate limits. Gong allows 3 calls a second and 10,000 a day by default, and answers 429 with Retry-After. The plugin waits that long and retries up to three times.
• Erasing data cannot be undone. dataPrivacy.purgeEmailAddress and dataPrivacy.purgePhoneNumber delete the emails, calls, leads and contacts tied to that address or number. Gong takes several hours to finish.
• Credits. entities.ask and entities.generateBrief use Gong credits on every call.
• Personal data stays out of the event log. Events record IDs, date ranges and list sizes. Names, email addresses, phone numbers, prospects, call parties and questions are not stored.
• Webhooks. The plugin does not receive webhooks.

• 66 typed API operations

​

Setup

npm install corsair @corsair-dev/gong better-sqlite3
npm install --save-dev @types/better-sqlite3

yarn add corsair @corsair-dev/gong better-sqlite3
yarn add --dev @types/better-sqlite3

pnpm install corsair @corsair-dev/gong better-sqlite3
pnpm install --save-dev @types/better-sqlite3

bun add corsair @corsair-dev/gong better-sqlite3
bun add --dev @types/better-sqlite3

import Database from 'better-sqlite3';
import { createCorsair } from 'corsair';
import { gong } from '@corsair-dev/gong';

export const corsair = createCorsair({
	plugins: [
		gong(),
	],
	database: new Database('corsair.db'),
	kek: process.env.CORSAIR_KEK!,
	multiTenancy: true,
	hub: {
		projectApiKey: process.env.CORSAIR_API_KEY!,
		signingSecret: process.env.CORSAIR_SIGNING_SECRET!,
	},
});

gong()

gong({
	authType: 'oauth_2',
})

const { connectUrl } = await corsair.manage.connect.createLink({
	plugin: 'gong',
	tenantId: 'acme',
});
// redirect the user's browser to connectUrl

​

Example API calls

const tenant = corsair.withTenant('acme');
await tenant.gong.api.calls.list({ fromDateTime: '2025-06-02T00:00:00Z', toDateTime: '2025-06-09T00:00:00Z' });

const tenant = corsair.withTenant('acme');
await tenant.gong.api.permissions.addCallUsers({
	callAccessList: [{
		callId: '7782342274025937895',
		userIds: ['234599484848423'],
	}],
});

​

What’s next