FormThunder isn't open yet. This site describes the service as it will run at launch. Find out more

AI and tools, updated 5 November 2026

REST API reference

The FormThunder REST API lives at https://formthunder.com/api/v1 and authenticates with a bearer key starting with ft_live_. It covers everything you can do in the dashboard. Errors always have the same shape, with a hint that says what to do next. The MCP server and CLI are built on this API, and /openapi.json describes it for tools.

Authentication

bash

curl https://formthunder.com/api/v1/me -H "Authorization: Bearer ft_live_..."

Create keys in the dashboard or with npx formthunder keys create. A key is shown once. It's a secret, unlike a form's access key, which is public.

Agency keys can act on a client by adding a header.

text

X-FormThunder-Account: <client account id>

Errors

json

{
  "error": {
    "code": "feature_requires_pro",
    "message": "Webhooks need the Pro plan.",
    "hint": "Upgrade at https://formthunder.com/app/billing or run `formthunder billing upgrade`.",
    "docs": "https://formthunder.com/docs/webhooks"
  }
}

Account

Endpoint	What it does
`GET /me`	Account, plan, limits, usage, role and kind
`GET /usage`	Submissions used this month
`GET /audit`	What changed, and which person or key changed it

Forms

Endpoint	What it does
`GET /forms`	List forms. `?include_deleted=false`
`POST /forms`	Create: `{name, recipients[], subject?, from_name?, redirect_url?, ...}`
`GET /forms/:id`	Get a form
`PATCH /forms/:id`	Change any form setting
`DELETE /forms/:id`	Delete a form
`GET /forms/:id/snippet`	`?framework=html\|react\|nextjs\|vue\|svelte\|astro` returns `{framework, code, notes}`
`POST /forms/:id/test`	Run a real test. Returns `{submission_id, deliveries[]}`
`POST /forms/:id/check`	`{url}`: fetch the live page and return `{ok, checks:[{id, ok, message, fix}]}`

Form settings include subject, from_name, reply_to, redirect_url, cc, intro_text, theme, template_id, allowed_domains, spam, autoresponder, integrations, attachments_enabled, status, name and recipients.

Submissions

Endpoint	What it does
`GET /submissions`	`?form_id&limit&cursor` returns `{data[], has_more, next_cursor}`. Pro
`GET /submissions/:id`	Includes `deliveries[]`. Pro
`POST /submissions`	`{form_id, fields{}, subject?, from_name?, replyto?, cc?, metadata?}` returns 201. Pro
`POST /submissions/:id/resend`	Re-queue failed deliveries

Brand and themes

Endpoint	What it does
`GET /brand`	The account's brand kit
`PUT /brand`	`{name, logo_url, colors{...}, font_family, heading_font_family, border_radius, footer_text, website_url}`
`POST /brand/extract`	`{url, apply?}` returns `{brand, confidence, notes[], applied}`
`GET /themes`	Built-in themes

Templates

Endpoint	What it does
`GET /templates`	List templates
`POST /templates`	`{name, kind, subject, html, text?}`. `kind` is `notification` or `autoresponder`. Custom HTML needs Pro
`GET /templates/:id`	Get a template
`PATCH /templates/:id`	Change a template
`DELETE /templates/:id`	Delete a template
`POST /templates/preview`	`{html?, template_id?, theme?, subject?, kind?, sample?}` returns `{subject, html, text, warnings[]}`
`POST /templates/test`	`{to, html?, template_id?, theme?, subject?, kind?}` returns `{sent:true}`
`POST /templates/generate`	`{url?, instructions?, kind?, save?, name?}`. The `generator` field says `claude` or `theme`
`GET /variables`	Every template variable

Linked emails

Endpoint	What it does
`GET /emails`	Linked emails and whether each is verified
`POST /emails`	`{email}` sends a verification link
`DELETE /emails/:email`	Remove a linked email

Clients (Agency)

Endpoint	What it does
`GET /clients`	List client accounts
`POST /clients`	`{name, contact_email?, invite?}`
`GET /clients/:id`	Get a client
`PATCH /clients/:id`	`{name, contact_email}`
`DELETE /clients/:id`	Delete a client and its forms
`POST /clients/:id/upgrade`	Upgrade to Pro. Adds a $5/mo line to your subscription
`POST /clients/:id/downgrade`	Move back to Free
`POST /clients/:id/invite`	`{email, role?}`
`GET /clients/:id/billing`	Retainer state
`POST /clients/:id/billing`	`{amount_cents, currency, interval, description, auto_upgrade?}` returns `{checkout_url, ...}`
`DELETE /clients/:id/billing`	Cancel the retainer

API keys

Endpoint	What it does
`GET /api-keys`	List keys. Secrets aren't shown
`POST /api-keys`	`{name, scopes?}`. The key is shown once
`DELETE /api-keys/:id`	Revoke a key

Other endpoints

Endpoint	What it does
`POST /submit`	Public form ingest
`POST /api/uploads/sign`	Signed upload URL
`POST /api/mcp`	Hosted MCP server
`POST /api/quick-key`	`{email, name?}` creates an account and first form, then emails the key
`POST /api/cli/device`	Start a CLI device login
`POST /api/cli/token`	`{device_code}` returns `{status}`, plus the key once approved
`GET /api/health`	Health check
`GET /openapi.json`	OpenAPI description