API reference · reference
Forms API reference
Submit forms, list submissions, and register webhooks.
Forms API
POST /forms/:id/submit
Submit a form programmatically (bypasses the rendered form). No auth required for public forms.
Body: JSON matching the form's schema. Files upload as multipart.
Response:
{ "submissionId": "…", "status": "ok", "paymentUrl": "…" }
paymentUrl is present when the form has a Payment field — redirect the user there.
GET /forms/:id/submissions
Auth required. Returns paginated submissions.
POST /forms/:id/webhooks
Register a webhook subscriber for a form.
{ "url": "https://…/hook", "events": ["submitted", "paid"], "secret": "…" }
Webhook payload
Every request POSTs JSON with an X-Wordsafe-Signature HMAC-SHA256 header:
signature = hex(hmac_sha256(secret, raw_body))
Verify before processing.
