Fillo Forms API
The Forms API from Fillo — 6 operation(s) for forms.
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/fillo-so:fillo-so-forms-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: Fillo So Forms API
version: 1.0.0
contact:
name: Fillo support
email: hello@fillo.so
url: https://fillo.so/developers
description: 'Operations tagged Forms across 2 of this provider''s published API definitions: fillo-so-openapi.json, fillo-so-openapi.json. Each path carries the servers of the definition it was published in.'
servers:
- url: https://fillo.so
security:
- bearerAuth: []
tags:
- name: Forms
paths:
/api/v1/manage/forms:
get:
tags:
- Forms
summary: List forms
operationId: listForms
description: 'Keyset list of the project''s forms, newest first. Scope: forms:read.'
parameters:
- $ref: '#/components/parameters/Cursor'
- $ref: '#/components/parameters/Limit'
responses:
'200':
description: A page of forms.
content:
application/json:
schema:
type: object
required:
- data
- nextCursor
properties:
data:
type: array
items:
$ref: '#/components/schemas/FormSummary'
nextCursor:
type:
- string
- 'null'
'400':
$ref: '#/components/responses/BadRequest'
'401':
$ref: '#/components/responses/Unauthorized'
'403':
$ref: '#/components/responses/Forbidden'
'429':
$ref: '#/components/responses/RateLimited'
servers:
- url: https://fillo.so
/api/v1/manage/forms/{form}:
get:
tags:
- Forms
summary: Get a form
operationId: getForm
description: 'The published contract for one form (id or slug): its published schema and settings, plus a hasDraft flag. `?include=draft` adds the staged revision (`draftSchema`, `draftTheme`) and the push handle, storage destination, and purpose — everything `fillo pull` needs — and additionally requires forms:write. Without it the draft schema is never exposed. Scope: forms:read.'
parameters:
- $ref: '#/components/parameters/FormHandle'
- name: include
in: query
description: Only "draft". Adds the staged revision and requires forms:write as well.
schema:
type: string
enum:
- draft
responses:
'200':
description: The form's published contract.
content:
application/json:
schema:
$ref: '#/components/schemas/FormDetail'
'400':
$ref: '#/components/responses/BadRequest'
'401':
$ref: '#/components/responses/Unauthorized'
'403':
$ref: '#/components/responses/Forbidden'
'404':
$ref: '#/components/responses/NotFound'
'429':
$ref: '#/components/responses/RateLimited'
patch:
tags:
- Forms
summary: Rename a form
operationId: renameForm
description: 'Rename a form and re-derive its slug. Old links keep working and no id changes, which is why this is routine (Tier A). Scope: forms:write.'
parameters:
- $ref: '#/components/parameters/FormHandle'
requestBody:
required: true
content:
application/json:
schema:
type: object
required:
- name
properties:
name:
type: string
minLength: 1
maxLength: 120
responses:
'200':
description: The renamed form.
content:
application/json:
schema:
type: object
required:
- id
- name
- slug
- status
properties:
id:
type: string
name:
type: string
slug:
type: string
status:
type: string
enum:
- draft
- published
'400':
$ref: '#/components/responses/BadRequest'
'401':
$ref: '#/components/responses/Unauthorized'
'403':
$ref: '#/components/responses/Forbidden'
'404':
$ref: '#/components/responses/NotFound'
'409':
$ref: '#/components/responses/Conflict'
'413':
$ref: '#/components/responses/PayloadTooLarge'
'429':
$ref: '#/components/responses/RateLimited'
servers:
- url: https://fillo.so
/api/v1/manage/forms/{form}/versions:
get:
tags:
- Forms
summary: List a form's schema versions
operationId: listFormVersions
description: 'The form''s stored schema versions, newest first. Scope: forms:read.'
parameters:
- $ref: '#/components/parameters/FormHandle'
responses:
'200':
description: The form's versions.
content:
application/json:
schema:
type: object
required:
- data
properties:
data:
type: array
items:
$ref: '#/components/schemas/FormVersion'
'401':
$ref: '#/components/responses/Unauthorized'
'403':
$ref: '#/components/responses/Forbidden'
'404':
$ref: '#/components/responses/NotFound'
'429':
$ref: '#/components/responses/RateLimited'
servers:
- url: https://fillo.so
/api/v1/manage/forms/{form}/unpublish:
post:
tags:
- Forms
summary: Unpublish a form
operationId: unpublishForm
description: 'Take a live form offline: the hosted page and every embed stop accepting responses immediately. Existing responses and files are kept, and publishing again brings the form back. Outward-facing (Tier B) — the key holder chose forms:write at mint. Idempotent: an already-offline form answers `changed: false`. Scope: forms:write.'
parameters:
- $ref: '#/components/parameters/FormHandle'
requestBody:
required: false
content:
application/json:
schema:
type: object
required: []
properties: {}
additionalProperties: false
description: No input. Any key is a 400.
responses:
'200':
description: The form, now offline.
content:
application/json:
schema:
type: object
required:
- id
- name
- slug
- status
- changed
properties:
id:
type: string
name:
type: string
slug:
type: string
status:
type: string
enum:
- draft
changed:
type: boolean
'400':
$ref: '#/components/responses/BadRequest'
'401':
$ref: '#/components/responses/Unauthorized'
'403':
$ref: '#/components/responses/Forbidden'
'404':
$ref: '#/components/responses/NotFound'
'409':
$ref: '#/components/responses/Conflict'
'413':
$ref: '#/components/responses/PayloadTooLarge'
'429':
$ref: '#/components/responses/RateLimited'
servers:
- url: https://fillo.so
/api/v1/manage/forms/{form}/discard:
post:
tags:
- Forms
summary: Discard staged changes
operationId: discardFormDraft
description: 'Drop a published form''s staged changes and return the editor to what is live. The live form is untouched, so this is routine (Tier A). `changed: false` means nothing was staged. Scope: forms:write.'
parameters:
- $ref: '#/components/parameters/FormHandle'
requestBody:
required: false
content:
application/json:
schema:
type: object
required: []
properties: {}
additionalProperties: false
description: No input. Any key is a 400.
responses:
'200':
description: The live schema that remains.
content:
application/json:
schema:
type: object
required:
- id
- changed
- schema
properties:
id:
type: string
changed:
type: boolean
schema:
type: object
description: The live FormSchema that remains.
'400':
$ref: '#/components/responses/BadRequest'
'401':
$ref: '#/components/responses/Unauthorized'
'403':
$ref: '#/components/responses/Forbidden'
'404':
$ref: '#/components/responses/NotFound'
'409':
$ref: '#/components/responses/Conflict'
'413':
$ref: '#/components/responses/PayloadTooLarge'
'429':
$ref: '#/components/responses/RateLimited'
servers:
- url: https://fillo.so
/api/v1/manage/forms/{form}/duplicate:
post:
tags:
- Forms
summary: Duplicate a form
operationId: duplicateForm
description: 'Copy a form into the same project as a fresh draft. The copy collects nothing until it is published, which keeps this routine (Tier A). A form whose deletion has already started is 410 here and on the CLI twin — one check, inside the shared core. Scope: forms:write.'
parameters:
- $ref: '#/components/parameters/FormHandle'
requestBody:
required: false
content:
application/json:
schema:
type: object
required: []
properties:
name:
type: string
minLength: 1
maxLength: 120
description: Defaults to "<source name> (copy)".
responses:
'201':
description: The new draft.
content:
application/json:
schema:
type: object
required:
- id
- name
- slug
- status
- source
- url
properties:
id:
type: string
name:
type: string
slug:
type: string
status:
type: string
enum:
- draft
source:
type: string
description: The form this copy came from.
url:
type: string
format: uri
'400':
$ref: '#/components/responses/BadRequest'
'401':
$ref: '#/components/responses/Unauthorized'
'403':
$ref: '#/components/responses/Forbidden'
'404':
$ref: '#/components/responses/NotFound'
'410':
description: This form is being deleted and can no longer be copied.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
'413':
$ref: '#/components/responses/PayloadTooLarge'
'429':
$ref: '#/components/responses/RateLimited'
servers:
- url: https://fillo.so
components:
schemas:
FormDetail:
type: object
required:
- id
- slug
- name
- status
- schema
- settings
- hasDraft
- createdAt
- updatedAt
properties:
id:
type: string
slug:
type: string
name:
type: string
status:
type: string
enum:
- draft
- published
schema:
type: object
description: The published FormSchema (see @usefillo/core).
settings:
type: object
description: The published FormSettings.
hasDraft:
type: boolean
createdAt:
type: string
format: date-time
updatedAt:
type: string
format: date-time
FormSummary:
type: object
required:
- id
- slug
- name
- status
- createdAt
- responseCount
properties:
id:
type: string
slug:
type: string
name:
type: string
status:
type: string
enum:
- draft
- published
createdAt:
type: string
format: date-time
responseCount:
type: integer
FormVersion:
type: object
required:
- id
- version
- schemaHash
- createdAt
properties:
id:
type: string
version:
type: integer
schemaHash:
type: string
createdAt:
type: string
format: date-time
Error:
type: object
required:
- error
properties:
error:
type: string
responses:
NotFound:
description: No such resource in this project (returned instead of 403 for ids in other projects).
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
RateLimited:
description: Per-key (120/min), per-workspace (240/min), or per-IP (300/min) rate limit exceeded. Retry after the Retry-After header.
headers:
RateLimit-Policy:
description: Named quota policies and their limits/windows.
schema:
type: string
RateLimit:
description: Current remaining quota and seconds until reset for each named policy.
schema:
type: string
RateLimit-Limit:
description: 'Compatibility field: effective request limit.'
schema:
type: integer
RateLimit-Remaining:
description: 'Compatibility field: effective requests remaining.'
schema:
type: integer
RateLimit-Reset:
description: 'Compatibility field: seconds until the effective window resets.'
schema:
type: integer
Retry-After:
description: Seconds to wait before retrying.
schema:
type: integer
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
Forbidden:
description: The key is valid but lacks the required scope.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
PayloadTooLarge:
description: The request body exceeded the 16 KiB management cap.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
Unauthorized:
description: Missing, malformed, unknown, revoked, or expired key.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
BadRequest:
description: Invalid request (e.g. a body on a GET/DELETE, or a missing required query parameter).
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
Conflict:
description: The request was understood but refused in this state — an unmet precondition, or a confirm value that did not match. Nothing was changed.
content:
application/json:
schema:
$ref: '#/components/schemas/Error'
parameters:
Cursor:
name: cursor
in: query
description: The id from a previous page's nextCursor. Omit for the first page.
schema:
type: string
FormHandle:
name: form
in: path
required: true
description: A form id or slug.
schema:
type: string
Limit:
name: limit
in: query
description: Page size, 1–100. Default 50.
schema:
type: integer
minimum: 1
maximum: 100
default: 50
securitySchemes:
bearerAuth:
type: http
scheme: bearer
description: 'A project secret key (`fsk_…`). Scopes: forms:read, responses:read, respondents:read, responses:export, forms:write, forms:publish, storage:manage, webhooks:manage, settings:manage, integrations:manage, responses:manage, members:manage, workspace:manage, forms:delete, responses:delete, respondents:delete, workspace:delete. A request for a scope the key lacks returns 403 with a stable message naming the scope (e.g. `This key lacks the responses:export scope.`).'
externalDocs:
description: Fillo developer resources
url: https://fillo.so/developers
x-refined-from:
- fillo-so-openapi.json
- fillo-so-openapi.json
x-provenance:
method: harvested
publisher: Fillo
source: https://fillo.so/openapi.json
note: split by refine-openapis from the provider's own published document, verified by fetch (openapi/_original/*.fetch.json);
stamped by stamp-openapi-provenance.py (roadmap#793)