The Formstack API uses OAuth2 for authorization. This allows Formstack users to authorize a 3rd party (your application) to access their Formstack account (forms, fields, submissions, etc). When a user authorizes an application, the application will be granted the same level of "form permissions" as that user.