Submit a published form (no auth — by public token)
POST/api/forms/public/:token/submit
Submit a published form. The body may be a {values:{…}} envelope or a flat field map, plus the optional __url and __utm context.
Doc 90: r (personal link token) binds the answers to its contact and is single-use; a SIGNED form needs __version (the version shown, 409 version_changed otherwise) and signing: \{name, signature (data URL JPEG/PNG), clauses: \{key: true\}\}.
Keys that are not one of the form's fields are DROPPED, not stored — only defined fields are validated, so an undefined key was never checked. The consent field named in the form's settings is the one exception and is always accepted.
Bounded: the body may not exceed 64 KB or 100 fields (413 / 422), and the endpoint is rate-limited per form token as well as per client IP.
Request
Responses
- 200
- 404
- 413
- 422
- 429
Submission result (success message + optional redirect).
Resource not found (or not visible to the current tenant).
The body exceeded the public-write size ceiling.
The request failed validation.
Rate limited (per form token and per client IP).