Forms

All endpoints require authentication via JWT cookie or Authorization: Bearer <token> header.

List forms

GET /api/v1/forms

Returns all forms for the authenticated user.

POST /api/v1/forms

{
  "name": "Contact Form"
}

GET /api/v1/forms/{id}

PATCH /api/v1/forms/{id}

Updateable fields: name, redirectUrl, allowedOrigins, rateLimit, honeypotField, recaptchaSecret.

DELETE /api/v1/forms/{id}

GET /api/v1/forms/{id}/submissions?page=1&limit=20

GET /api/v1/forms/{id}/export?format=csv

Supported formats: csv, json.