Public form schema (no auth — by public token; published only)

GET 
/api/forms/public/:token

The renderable schema of a published form. settings is an ALLOWLIST, not the form's stored settings bag: staff notification addresses, the destination table and the contact field map are never published here. A field flagged hidden is the form's honeypot — render it in the DOM but out of reach of people (off-screen, tabindex="-1", aria-hidden), and treat its required as false. Filling it marks the submission spam.

Request

Responses

200

The renderable form schema.

404

Resource not found (or not visible to the current tenant).

410

The personal link is expired, already used or withdrawn (code says which).