API Methods

A list of all api methods (exposed as REST resources) can be found here:
Formstack API REST Resources

Request Formats

The Formstack API accepts two request data types: HTTP url encoded query parameters and JSON. By default, we expect HTTP url encoded query parameters. To use JSON, simply change the Content-Type header in your request to be "Content-Type: application/json" and put the JSON in the body of the request.

Response Formats

The Formstack API offers two response types: JSON (default) and XML. To indicate which response type you would like to receive, simply add .xml or .json to the end of any resource URIs. If an extension is not present, we will respond with JSON.

https://www.formstack.com/api/v2/form.json
https://www.formstack.com/api/v2/form/12334/submission.xml

Obtaining an API key (OAuth2 Access Token)

All of our API calls require authentication. The REST API uses OAuth2 access tokens for this purpose. Creating an application record will also create an access token. Access tokens are tied to a Formstack user and follow Formstack (in-app) user permissions. Additional access tokens can be generated by the OAuth2 authorization process.

To request an OAuth2 token to use with the Formstack API explorer, visit here.

Authentication

Once you have an access token, you can make authenticated api calls. To do this, include the access token in the HTTP Authorization header:

Authorization: Bearer &lt;access-token&gt;

On any GET api calls, you can set the access token as a part of the query string:

https://www.formstack.com/api/v2/form.json?oauth_token=abcdefg123456

That access token is similarly used on the Try It Out feature on this website. Input Bearer<access-token> into the Authorization field of the Try It Out feature on any of the APIs.

Rate Limits

To prevent abuse, the Formstack API is rate limited to 14,400 calls per access token per day.

Status Codes

The Formstack API uses standard HTTP status codes.

Code	Description
200	OK - The request was handled without any errors
201	Created - A new resource was created
400	Bad Request - The request URI was invalid
401	Unauthorized - Valid OAuth2 credentials were not supplied
403	Forbidden - The current user does not have access to this method
404	Not Found - The resource requested could not be found
405	Method Not Allowed - The requested method does not exist
415	Unsupported Media Type - A valid media type (JSON, XML, HTTP URL encoded) was not used
429	Too Many Requests - The current user has hit the daily rate limit
500	Internal Server Error - An error occurred while processing the request