Forma

Forma is a flexible employee benefits platform, founded in 2017, that lets companies design, customize, and scale employee spending accounts from a single system. Employers select from a suite of Lifestyle Spending Accounts (LSA), Health Spending Accounts (HSA), Health Reimbursement Arrangements (HRA), and Flexible Spending Accounts (FSA), and employees access benefits through the Forma Store, the Forma Visa Card, or reimbursement claims. Forma connects to employer systems through 40+ HRIS and payroll integrations (Workday, ADP, UKG, Paylocity), SCIM provisioning, SAML2 SSO, and file feeds. Forma does not publish a public developer REST API; its technical surface is HRIS/SSO/SCIM integration and its trust posture (SOC 2 Type 2, HIPAA, GDPR). Backed by Emergence Capital, Ribbit Capital, and Uncork Capital.

Forma is profiled on the APIs.io network. Tagged areas include Company, HR Tech, Employee Benefits, Lifestyle Spending Accounts, and Flexible Spending Accounts.

Forma’s developer surface includes engineering blog, support, and 12 more developer resources.

🌐 Visit website 📡 Source on GitHub

18.7/100 emerging ▬ flat Agent 0/100 human only Full breakdown ↓
scored 2026-08-20 · rubric v0.12.0

0 APIs

Company HR Tech Employee BenefitsLifestyle Spending AccountsFlexible Spending AccountsHealth Benefits HRIS Integration SCIM

Kin Score

Kin Score How this is scored →
scored 2026-08-20 · rubric v0.12.0

Composite quality — 18.7/100 · emerging

Contract Quality 0.0 / 21

Developer Ergonomics 1.2 / 17

Access Clarity 7.4 / 17

Operational Transparency 1.5 / 11

Contract Governance 0.0 / 10

Discoverability 4.3 / 9

Regulatory Posture 4.7 / 15

Agent readiness — 0/100 · human only

Machine-Readable Contract 0 / 18

Agentic Access Contract 0 / 10

Documented Reversibility 0 / 6

MCP Server 0 / 12

Machine-Readable Auth 0 / 10

Idempotency 0 / 9

Stable Error Semantics 0 / 8

Request/Response Examples 0 / 7

Rate-Limit Signaling 0 / 7

Typed Event Surface 0 / 6

Agent Skills 0 / 5

Well-Known Catalog 0 / 4

Consent & Bot Identity 0 / 3

A2A Agent Card 0 / 8

Dry-Run / Simulate Mode 0 / 4

Regulatory Posture applies to this provider. Its tags matched the Health regime, so Regulatory Posture carries 15 points of the composite. If this regime is wrong for your business, say so on your provider repo — the applicability map is public and we will correct it.

The six quality facets above are damped to 85 points between them, because the conditional facet above carries the other 15. That is why each facet's contribution is shown against a damped maximum: raising a quality facet moves the composite by 85% of its nominal weight, not 100%. The full arithmetic is at apis.io/rating/.

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/forma: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

Get Started 1

Portal, sign-up, and the first successful call

Login

Build 1

SDKs, sample code, and the tooling you integrate with

GitHubOrganization

GitHubOrganization

Access & Security 6

Authentication, authorization, and security posture

VulnerabilityDisclosure

VulnerabilityDisclosure

DomainSecurity

TrustCenter

Security

Compliance

Trust

Operate 2

Status, limits, changes, and where to get help

StatusPage

StatusPage

Support

Support

Commercial 2

Pricing, plans, and the legal terms of use

TermsOfService

TermsOfService

PrivacyPolicy

PrivacyPolicy

Company 2

The organization behind the API

Website

Website

Blog

Blog

Source (apis.yml)

aid: forma
name: Forma
description: Forma is a flexible employee benefits platform, founded in 2017, that lets companies design, customize, and scale
  employee spending accounts from a single system. Employers select from a suite of Lifestyle Spending Accounts (LSA), Health
  Spending Accounts (HSA), Health Reimbursement Arrangements (HRA), and Flexible Spending Accounts (FSA), and employees access
  benefits through the Forma Store, the Forma Visa Card, or reimbursement claims. Forma connects to employer systems through
  40+ HRIS and payroll integrations (Workday, ADP, UKG, Paylocity), SCIM provisioning, SAML2 SSO, and file feeds. Forma does
  not publish a public developer REST API; its technical surface is HRIS/SSO/SCIM integration and its trust posture (SOC 2
  Type 2, HIPAA, GDPR). Backed by Emergence Capital, Ribbit Capital, and Uncork Capital.
url: https://raw.githubusercontent.com/api-evangelist/forma/refs/heads/main/apis.yml
x-type: company
x-source: vc-portfolio
x-backed-by:
- emergence-capital
- ribbit-capital
- uncork-capital
x-tier: stub
x-tier-reason: portfolio-lead
accessModel:
  pricing: unknown
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Unknown
  confidence: low
  source: []
  generated: '2026-07-22'
  method: derived
specificationVersion: '0.23'
created: '2026-07-17'
modified: '2026-07-19'
image: https://cdn.prod.website-files.com/61fcf661d5fa0f6756473fea/62037846b95bd26645cb438c_Forma%20Logo%20Svg.svg
tags:
- Company
- HR Tech
- Employee Benefits
- Lifestyle Spending Accounts
- Flexible Spending Accounts
- Health Benefits
- HRIS Integration
- SCIM
tags_raw:
- Company
- Hr Tech
- Employee Benefits
- Lifestyle Spending Accounts
- Flexible Spending Accounts
- Health Benefits
- HRIS Integration
- SCIM
apis: []
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: VulnerabilityDisclosure
  url: security/forma-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/forma-domain-security.yml
- type: TrustCenter
  url: security/forma-trust-center.yml
- type: Website
  url: https://www.joinforma.com
- type: Security
  url: https://www.joinforma.com/legal/security
- type: Compliance
  url: https://www.joinforma.com/platform/security
- type: Trust
  url: https://trust.joinforma.com/
- type: StatusPage
  url: https://status.joinforma.com/
- type: Blog
  url: https://www.joinforma.com/blog
- type: Support
  url: https://support.joinforma.com/
- type: Login
  url: https://client.joinforma.com/login
- type: TermsOfService
  url: https://www.joinforma.com/legal/terms
- type: PrivacyPolicy
  url: https://www.joinforma.com/legal/privacy-policy
- type: GitHubOrganization
  url: https://github.com/joinforma
x-enrichment:
  date: '2026-07-19'
  status: backfilled
  pass: local-v1
  note: backfilled from .gitignore signal + verified work evidence

Forma

Kin Score

Security Posture 3

Forma Domain Security

Forma Vulnerability Disclosure

Forma Trust Center

Resources