The form backend built for AI agents.

One call, live endpoint

One POST to the instant provisioning endpoint returns a live form endpoint, ready to receive submissions immediately:

curl -X POST https://formslist.com/api/v1/instant \
  -H 'Content-Type: application/json' \
  -d '{"email":"owner@example.com","form_name":"Contact"}'

The response has everything an agent needs to wire the form into the page it is generating:

{
  "endpoint": "https://formslist.com/f/abc123",
  "html_snippet": "...",
  "claim_url": "...",
  "expires_at": "..."
}

The form works immediately — drop the html_snippet into the generated page and submissions start flowing. The site owner gets an email to claim the dashboard; unclaimed forms expire in 7 days.

Self-documenting endpoints

Agents shouldn't have to guess how an endpoint works. A GET request to any form endpoint (GET /f/<hash>) returns JSON usage docs for that exact form: accepted content types, expected fields, and example requests.

When something goes wrong, errors come back as {error, fix, docs_url} — a machine-readable description of what failed, the concrete fix, and a link to the relevant docs — so agents self-correct without a human reading a stack trace. The full form submission API works the same way for reading submissions and managing forms.

MCP server

FormsList ships an MCP server, so agent runtimes that speak the Model Context Protocol get typed tools instead of raw HTTP. Add it to Claude Code:

claude mcp add formslist -- node /path/to/formflow/mcp/dist/index.js

Or configure Claude Desktop:

{
  "mcpServers": {
    "formslist": {
      "command": "node",
      "args": ["/path/to/formflow/mcp/dist/index.js"],
      "env": { "FORMSLIST_API_KEY": "ff_sk_..." }
    }
  }
}

FORMSLIST_API_KEY is optional — without it the server can still provision instant forms; with it the full account is available. Seven tools are exposed:

Made to be found by AI

An AI-native backend is only useful if models can discover and understand it at generation time. FormsList publishes machine-readable surface area for exactly that:

Spam protection built in

Forms provisioned by agents get the same protection as every FormsList form: a honeypot field, heuristic spam scoring, and duplicate detection run on every submission automatically. There is nothing to configure and nothing for the agent to wire up — a form dropped into a generated static site is production-safe from the first submission.