Skip to main content
POST
Submit an entry to a published form

Authorizations

Authorization
string
header
required

Personal Access Token prefixed with fh_. Sent as Authorization: Bearer fh_xxx. The scope required by each endpoint is listed in that endpoint's description.

Headers

X-Form-Access-Password
string

Access password, when the form is password-protected

Path Parameters

form_token
string
required

Token of a published form

Body

application/json
field_values
object
required

Map keyed by field api_code; unknown keys are dropped silently. Fields with private: true cannot be submitted here — their keys are ignored and the server fills each private field's predefined_value, if any.

Example:

Response

Submitted

data
object
required

A submitted entry. In addition to the fixed fields below, every field of the parent form appears as a top-level key on the entry under its api_code. The JSON value type for each such key is determined by the corresponding field's type.

Field value shapes

Each field of the parent form appears as a top-level key on the entry, keyed by its api_code. The JSON shape of the value depends on the field's type:

Last modified on July 24, 2026