Skip to the documentation
API

Forms

Every operation in this group: what it accepts, what it returns and the errors it can answer with.

Operations

Sign-up forms that add the people who fill them in to your audiences. A form has a draft document you edit and a published copy visitors see, so design changes go live only when you publish, while settings apply as soon as they are saved. Share a form by its hosted url, embed it with one script tag, or post to its subscribeUrl from your own HTML or code.

With double opt-in on, each person gets a confirmation email from the form's sending address and joins once they confirm or you approve them. Submissions keep every answer, and a person who joins becomes a contact in the workspace.

GET/forms

List forms

Scopesforms:readReads

Every sign-up form in the workspace, newest first, without the document or settings. stats is counted at the moment of the read.

An app a member connected lists only the forms that member made, as the console does for them.

Requires the forms:read scope.

Query parameters

limitinteger

Rows per page, 1 to 100.

At least 1At most 100Default25
cursorstring

The previous page's nextCursor, passed back as it came. It is opaque: it holds where the last row sat in this list's order, so a row deleted or edited between pages never breaks the walk, and the next page starts at the first row that sorts after it. A value this list did not hand out is a 400 invalid_cursor.

Returns

A page of forms.

Errors

The errors every operation can return400401403404422429500Error catalog

Also available in

TypeScript
nextmail.forms.list()nextmail.forms.listAll()nextmail.forms.iterate()
Python
forms.list()forms.list_all()forms.iterate()
Ruby
forms.listforms.list_allforms.iterate
PHP
forms->listforms->listAllforms->iterate
Go
Forms.ListForms.ListAllForms.Iterate
Java
forms().listforms().listAllforms().iterate
C#
Forms.ListAsyncForms.ListAllAsyncForms.IterateAsync
CLI
nextmail forms list
MCP
listForms

POST/forms

Create a form

Scopesforms:writeChanges data

Makes a draft from document, from a starter, or from a one-field email form when neither is sent, and answers with the whole form. Send publish: true to put it live in the same call.

Every audience in settings.audienceIds and in an audience field has to be one the caller can reach in this workspace. settings.senderAddress has to be an address the caller may send as, and a key limited to some addresses may only name ones it holds there and in settings.notifyAddresses. A call that turns on settings.doubleOptIn, names a settings.senderAddress or changes the confirmation email also needs emails:send, because the form then sends mail for you.

A new form asks people to confirm by email: settings.doubleOptIn is true unless you send false. When you leave out both it and settings.senderAddress and the key holds emails:send, confirmations come from the first address the key may send as. A draft can wait without a sender, but publishing a double opt-in form needs one and emails:send, so publish: true without settings.doubleOptIn: false also needs emails:send. Forms made before this keep their setting.

Share it with url, post plain HTML forms to subscribeUrl, or embed it with the script /embed/form.js served from the web app's domain.

Requires the forms:write scope.

Request body

namestringRequired

What the workspace calls the form, trimmed, 1 to 120 characters. Visitors never see it, and it need not be unique.

1 to 120 characters
descriptionstring

A note for the workspace, at most 500 characters. Visitors never see it.

Can be nullUp to 500 characters
starterstring

Begin from a starter's fields, copy and style. Ignored when document is sent.

One of"blank""newsletter""waitlist""event""early-access""contact"
documentobject

Everything a visitor sees: fields in order, the copy around them and the style. Every form has exactly one email field, and every input field has a unique key that answers are posted under.

fieldsobject[]Required
1 to 50 items
idstringRequired
1 to 64 characters
typestringRequired
One of"email""text""textarea""number""phone""url""date""select""radio""checkboxes""checkbox""consent""audiences""hidden""heading""paragraph""divider"
keystringRequired
Up to 40 charactersPattern^[a-z][a-z0-9_]{0,39}$
labelstringRequired
Up to 300 characters
placeholderstringRequired
Can be nullUp to 200 characters
helpstringRequired
Can be nullUp to 1000 characters
requiredbooleanRequired
defaultValuestringRequired
Can be nullUp to 1000 characters
optionsobject[]Required
Up to 50 items
idstringRequired
1 to 64 characters
labelstringRequired
1 to 300 characters
valuestringRequired
1 to 1000 characters
mapsTostringRequired

The contact detail this field fills when the sign-up is accepted, or null for none. email goes on the email field. firstName, lastName, name, company and jobTitle go on a text field, phone on a phone field, website on a url field and birthday on a date field. One field per detail, and name never together with firstName or lastName. The name is saved on the contact. The phone number, company, job title, website and birthday are saved on the contact card, and only where the card has nothing yet: a company, job title or birthday already there is kept, and a phone number or website the card already lists is not added again.

Can be nullOne of"email""firstName""lastName""name""phone""company""jobTitle""website""birthday"
saveAsstring

A custom field of the contact this field fills when the sign-up is accepted, such as plan, or null for none. A key starts with a letter and holds up to 64 letters, digits and underscores. The answer replaces the field of that name on the contact, an empty answer leaves it alone, and a choice of several options is saved as their labels joined by commas. Not on the email field or an audience choice, one field per custom field, and never together with mapsTo. Left out when a form is updated, a field keeps the custom field it had.

Can be nullPattern^[A-Za-z][A-Za-z0-9_]{0,63}$
widthstringRequired
One of"full""half"
minLengthintegerRequired
Can be nullAt least 0At most 5000
maxLengthintegerRequired
Can be nullAt least 1At most 5000
minnumberRequired
Can be nullAt least -1000000000000At most 1000000000000
maxnumberRequired
Can be nullAt least -1000000000000At most 1000000000000
copyobjectRequired
titlestringRequired
Up to 200 characters
descriptionstringRequired
Can be nullUp to 2000 characters
submitLabelstringRequired
1 to 60 characters
successTitlestringRequired
Up to 200 characters
successMessagestringRequired
Up to 2000 characters
pendingTitlestringRequired
Up to 200 characters
pendingMessagestringRequired
Up to 2000 characters
closedTitlestringRequired
Up to 200 characters
closedMessagestringRequired
Up to 2000 characters
footerstringRequired
Can be nullUp to 2000 characters
styleobjectRequired
accentstringRequired
Pattern^#[0-9a-fA-F]{6}$
backgroundstringRequired
Pattern^#[0-9a-fA-F]{6}$
surfacestringRequired
Pattern^#[0-9a-fA-F]{6}$
textstringRequired
Pattern^#[0-9a-fA-F]{6}$
fontstringRequired
One of"system""sans""serif""mono"
radiusstringRequired
One of"none""sm""md""lg""full"
widthstringRequired
One of"narrow""normal""wide"
layoutstringRequired
One of"card""plain"
alignstringRequired
One of"left""center"
logoUrlstringRequired
Can be nullUp to 2000 charactersFormaturi
settingsobject

Any subset of the settings. An omitted field keeps its value.

audienceIdsstring[]
Up to 20 items
doubleOptInboolean
senderAddressstring
Can be nullUp to 2000 characters
confirmSubjectstring
1 to 200 characters
confirmMessagestring
Up to 2000 characters
confirmButtonstring
1 to 60 characters
successActionstring
One of"message""redirect"
redirectUrlstring
Can be nullUp to 2000 charactersFormaturi
notifyAddressesstring[]
Up to 10 items
allowedSitesstring[]

The sites that may show this form or post to it, at most 20: a domain (example.com, which covers www.example.com too), every subdomain of one (*.example.com), or either with a path (example.com/pricing, example.com/blog/*). A scheme or a port narrows it further (https://example.com, localhost:3000). An empty list means any site. The form's own page always works.

Up to 20 items
publishboolean

Publish in the same call, so the form takes sign-ups at once. Nothing is created when the form could not be published.

Returns

201Form

Created.

Errors

404

audience_not_found on settings.audienceIds.

422

invalid_parameter for an unknown starter or a value of the wrong shape, unknown_parameter for a key the body does not take, invalid_form when the document or settings break a rule together, form_sender_refused when confirmations cannot go out from settings.senderAddress, capability_unsupported for an address outside a limited key, or workspace_limit_reached when the workspace holds the most forms it may.

The errors every operation can return400401403429500Error catalog

Also available in

TypeScript
nextmail.forms.create()
Python
forms.create()
Ruby
forms.create
PHP
forms->create
Go
Forms.Create
Java
forms().create
C#
Forms.CreateAsync
CLI
nextmail forms create
MCP
createForm

GET/forms/starters

List the form starters

Scopesforms:readReads

The starting points the console offers when somebody makes a form. Not paginated and not workspace data. The slug is what POST /forms takes as starter.

Requires the forms:read scope.

Returns

Every starter, documents left out.

Errors

The errors every operation can return400401403404422429500Error catalog

Also available in

TypeScript
nextmail.forms.listStarters()
Python
forms.list_starters()
Ruby
forms.list_starters
PHP
forms->listStarters
Go
Forms.ListStarters
Java
forms().listStarters
C#
Forms.ListStartersAsync
CLI
nextmail forms list-starters
MCP
listFormStarters

GET/forms/starters/{slug}

Retrieve a form starter

Scopesforms:readReads

Adds the starter document, so a client can change it before creating a form from it.

Requires the forms:read scope.

Path parameters

slugstringRequired

A slug from GET /forms/starters.

One of"blank""newsletter""waitlist""event""early-access""contact"

Returns

The starter with its document.

Errors

404

form_starter_not_found when no starter has that slug.

The errors every operation can return400401403422429500Error catalog

Also available in

TypeScript
nextmail.forms.getStarter()
Python
forms.get_starter()
Ruby
forms.get_starter
PHP
forms->getStarter
Go
Forms.GetStarter
Java
forms().getStarter
C#
Forms.GetStarterAsync
CLI
nextmail forms get-starter
MCP
listFormStarters

GET/forms/{id}

Retrieve a form

Scopesforms:readReads

The whole form: the draft document, the publishedDocument visitors see, settings, the named audiences and fresh stats. A form in another workspace is a 404, never a 403.

Requires the forms:read scope.

Path parameters

idstringRequired

The form id, frm_ plus 24 hex.

Returns

200Form

The form.

Errors

404

form_not_found when the id names no form you can reach.

The errors every operation can return400401403422429500Error catalog

Also available in

TypeScript
nextmail.forms.get()
Python
forms.get()
Ruby
forms.get
PHP
forms->get
Go
Forms.Get
Java
forms().get
C#
Forms.GetAsync
CLI
nextmail forms get
MCP
getForm

PATCH/forms/{id}

Update a form

Scopesforms:writeChanges data

A partial update. document replaces the draft whole and a live form keeps showing its published copy until POST /forms/{id}/publish. settings is merged field by field and takes effect at once. A call that turns on settings.doubleOptIn, names a settings.senderAddress or changes the confirmation email also needs emails:send, because the form then sends mail for you.

Read the form, change it and send expectedUpdatedAt with the updatedAt you read: if someone saved the form in between, your change is refused rather than written over theirs.

Requires the forms:write scope.

Path parameters

idstringRequired

The form id, frm_ plus 24 hex.

Request body

namestring

New name, trimmed, 1 to 120 characters.

1 to 120 characters
descriptionstring

New note, at most 500 characters. Null clears it.

Can be nullUp to 500 characters
documentobject

Everything a visitor sees: fields in order, the copy around them and the style. Every form has exactly one email field, and every input field has a unique key that answers are posted under.

fieldsobject[]Required
1 to 50 items
idstringRequired
1 to 64 characters
typestringRequired
One of"email""text""textarea""number""phone""url""date""select""radio""checkboxes""checkbox""consent""audiences""hidden""heading""paragraph""divider"
keystringRequired
Up to 40 charactersPattern^[a-z][a-z0-9_]{0,39}$
labelstringRequired
Up to 300 characters
placeholderstringRequired
Can be nullUp to 200 characters
helpstringRequired
Can be nullUp to 1000 characters
requiredbooleanRequired
defaultValuestringRequired
Can be nullUp to 1000 characters
optionsobject[]Required
Up to 50 items
idstringRequired
1 to 64 characters
labelstringRequired
1 to 300 characters
valuestringRequired
1 to 1000 characters
mapsTostringRequired

The contact detail this field fills when the sign-up is accepted, or null for none. email goes on the email field. firstName, lastName, name, company and jobTitle go on a text field, phone on a phone field, website on a url field and birthday on a date field. One field per detail, and name never together with firstName or lastName. The name is saved on the contact. The phone number, company, job title, website and birthday are saved on the contact card, and only where the card has nothing yet: a company, job title or birthday already there is kept, and a phone number or website the card already lists is not added again.

Can be nullOne of"email""firstName""lastName""name""phone""company""jobTitle""website""birthday"
saveAsstring

A custom field of the contact this field fills when the sign-up is accepted, such as plan, or null for none. A key starts with a letter and holds up to 64 letters, digits and underscores. The answer replaces the field of that name on the contact, an empty answer leaves it alone, and a choice of several options is saved as their labels joined by commas. Not on the email field or an audience choice, one field per custom field, and never together with mapsTo. Left out when a form is updated, a field keeps the custom field it had.

Can be nullPattern^[A-Za-z][A-Za-z0-9_]{0,63}$
widthstringRequired
One of"full""half"
minLengthintegerRequired
Can be nullAt least 0At most 5000
maxLengthintegerRequired
Can be nullAt least 1At most 5000
minnumberRequired
Can be nullAt least -1000000000000At most 1000000000000
maxnumberRequired
Can be nullAt least -1000000000000At most 1000000000000
copyobjectRequired
titlestringRequired
Up to 200 characters
descriptionstringRequired
Can be nullUp to 2000 characters
submitLabelstringRequired
1 to 60 characters
successTitlestringRequired
Up to 200 characters
successMessagestringRequired
Up to 2000 characters
pendingTitlestringRequired
Up to 200 characters
pendingMessagestringRequired
Up to 2000 characters
closedTitlestringRequired
Up to 200 characters
closedMessagestringRequired
Up to 2000 characters
footerstringRequired
Can be nullUp to 2000 characters
styleobjectRequired
accentstringRequired
Pattern^#[0-9a-fA-F]{6}$
backgroundstringRequired
Pattern^#[0-9a-fA-F]{6}$
surfacestringRequired
Pattern^#[0-9a-fA-F]{6}$
textstringRequired
Pattern^#[0-9a-fA-F]{6}$
fontstringRequired
One of"system""sans""serif""mono"
radiusstringRequired
One of"none""sm""md""lg""full"
widthstringRequired
One of"narrow""normal""wide"
layoutstringRequired
One of"card""plain"
alignstringRequired
One of"left""center"
logoUrlstringRequired
Can be nullUp to 2000 charactersFormaturi
settingsobject

Any subset of the settings. An omitted field keeps its value.

audienceIdsstring[]
Up to 20 items
doubleOptInboolean
senderAddressstring
Can be nullUp to 2000 characters
confirmSubjectstring
1 to 200 characters
confirmMessagestring
Up to 2000 characters
confirmButtonstring
1 to 60 characters
successActionstring
One of"message""redirect"
redirectUrlstring
Can be nullUp to 2000 charactersFormaturi
notifyAddressesstring[]
Up to 10 items
allowedSitesstring[]

The sites that may show this form or post to it, at most 20: a domain (example.com, which covers www.example.com too), every subdomain of one (*.example.com), or either with a path (example.com/pricing, example.com/blog/*). A scheme or a port narrows it further (https://example.com, localhost:3000). An empty list means any site. The form's own page always works.

Up to 20 items
expectedUpdatedAtstring

The updatedAt you read. When the form was saved since, nothing is written and the answer is 409 version_conflict.

Formatdate-time

Returns

200Form

Saved.

Errors

404

form_not_found, or audience_not_found on settings.audienceIds.

409

version_conflict: the form was saved after expectedUpdatedAt. Nothing was written.

422

invalid_parameter for a value of the wrong shape, unknown_parameter for a key the body does not take, invalid_form when the document or settings break a rule together, form_sender_refused or capability_unsupported, each with param naming the field.

The errors every operation can return400401403429500Error catalog

Also available in

TypeScript
nextmail.forms.update()
Python
forms.update()
Ruby
forms.update
PHP
forms->update
Go
Forms.Update
Java
forms().update
C#
Forms.UpdateAsync
CLI
nextmail forms update
MCP
updateForm

DELETE/forms/{id}

Delete a form

Scopesforms:writeDeletes
Asks for a verification code

Deletes the form and every submission it holds. Its hosted page and embed stop working at once. The people it added stay in your contacts and audiences.

There is no undo.

Requires the forms:write scope.

Path parameters

idstringRequired

The form id, frm_ plus 24 hex.

Returns

Deleted.

Errors

403

The key lacks the scope, or may not send as that address.

step_up_required: the call was made with an OAuth access token that has not been verified in the last 60 minutes. Ask for a code with POST /security/step-up, send it to POST /security/step-up/verify, then repeat the call. The person can also choose Allow changes for 60 minutes on the app in Account settings, Connected apps, on the Nextmail website. An API key is never asked for a code.

404

form_not_found when the id names no form you can reach.

The errors every operation can return400401422429500Error catalog

Also available in

TypeScript
nextmail.forms.delete()
Python
forms.delete()
Ruby
forms.delete
PHP
forms->delete
Go
Forms.Delete
Java
forms().delete
C#
Forms.DeleteAsync
CLI
nextmail forms delete
MCP
deleteForm

POST/forms/{id}/publish

Publish a form

Scopesforms:writeChanges data

Copies the draft document to publishedDocument and sets the form live, so the hosted page, the embed and the subscribe endpoint show and take the new version. Publishing a paused form opens it again. No body.

A double opt-in form also needs a senderAddress that can send confirmations, and the caller needs emails:send.

Requires the forms:write scope.

Path parameters

idstringRequired

The form id, frm_ plus 24 hex.

Returns

200Form

Published.

Errors

404

form_not_found when the id names no form you can reach.

422

invalid_form or form_sender_refused, with param naming the field, or capability_unsupported when the key or app is limited to some addresses and the form's settings.senderAddress or settings.notifyAddresses falls outside them.

The errors every operation can return400401403429500Error catalog

Also available in

TypeScript
nextmail.forms.publish()
Python
forms.publish()
Ruby
forms.publish
PHP
forms->publish
Go
Forms.Publish
Java
forms().publish
C#
Forms.PublishAsync
CLI
nextmail forms publish
MCP
publishForm

POST/forms/{id}/pause

Pause a form

Scopesforms:writeChanges data

Stops a published form taking sign-ups. Its page stays up and shows the closed message from its copy, and a JSON post to its subscribe endpoint answers 409 form_closed while a plain HTML form goes to the hosted page. Pausing a paused form changes nothing. No body.

Requires the forms:write scope.

Path parameters

idstringRequired

The form id, frm_ plus 24 hex.

Returns

200Form

Paused.

Errors

404

form_not_found when the id names no form you can reach.

409

form_not_published: a form that was never published cannot be paused.

The errors every operation can return400401403422429500Error catalog

Also available in

TypeScript
nextmail.forms.pause()
Python
forms.pause()
Ruby
forms.pause
PHP
forms->pause
Go
Forms.Pause
Java
forms().pause
C#
Forms.PauseAsync
CLI
nextmail forms pause
MCP
setFormStatus

POST/forms/{id}/resume

Resume a form

Scopesforms:writeChanges data

Opens a paused form again, with the version that was published last. Resuming a live form changes nothing. No body.

Resuming a double opt-in form also needs emails:send.

Requires the forms:write scope.

Path parameters

idstringRequired

The form id, frm_ plus 24 hex.

Returns

200Form

Live.

Errors

404

form_not_found when the id names no form you can reach.

409

form_not_published: publish the form first.

422

form_sender_refused when a double opt-in form can no longer send confirmations, invalid_form when the published form breaks a rule, or capability_unsupported when the key or app is limited to some addresses and the form's settings.senderAddress or settings.notifyAddresses falls outside them.

The errors every operation can return400401403429500Error catalog

Also available in

TypeScript
nextmail.forms.resume()
Python
forms.resume()
Ruby
forms.resume
PHP
forms->resume
Go
Forms.Resume
Java
forms().resume
C#
Forms.ResumeAsync
CLI
nextmail forms resume
MCP
setFormStatus

POST/forms/{id}/duplicate

Duplicate a form

Scopesforms:writeChanges data

Makes a new draft with the same document and settings and "copy" after the name. Submissions and statistics are not copied. No body.

Requires the forms:write scope.

Path parameters

idstringRequired

The form id, frm_ plus 24 hex.

Returns

201Form

The copy.

Errors

404

form_not_found when the id names no form you can reach.

422

workspace_limit_reached when the workspace holds the most forms it may, or capability_unsupported when the key or app is limited to some addresses and the form's settings.senderAddress or settings.notifyAddresses falls outside them.

The errors every operation can return400401403429500Error catalog

Also available in

TypeScript
nextmail.forms.duplicate()
Python
forms.duplicate()
Ruby
forms.duplicate
PHP
forms->duplicate
Go
Forms.Duplicate
Java
forms().duplicate
C#
Forms.DuplicateAsync
CLI
nextmail forms duplicate
MCP
duplicateForm

GET/forms/{id}/analytics

Form analytics

Scopesforms:readReads

Views, submissions and people added over a window, in buckets, with totals and the conversion rate. A view is one load of the hosted page or the embed while the form is live, and views are not deduplicated by visitor.

Requires the forms:read scope.

Path parameters

idstringRequired

The form id, frm_ plus 24 hex.

Query parameters

daysinteger

How far back to look. The oldest bucket is a whole one and the newest is partial.

At least 1At most 1095Default30
minutesinteger

The window in minutes, which wins over days when both are sent.

At least 1At most 1576800
grainstring

How wide one bucket is. Views are kept per hour.

One of"minute""hour""day"Default"day"
offsetMinutesinteger

Minutes east of UTC to cut the buckets in, so a day breaks where the reader's day does.

At least -840At most 840Default0

Returns

The window, the totals and the series.

Errors

404

form_not_found when the id names no form you can reach.

The errors every operation can return400401403422429500Error catalog

Also available in

TypeScript
nextmail.forms.analytics()
Python
forms.analytics()
Ruby
forms.analytics
PHP
forms->analytics
Go
Forms.Analytics
Java
forms().analytics
C#
Forms.AnalyticsAsync
CLI
nextmail forms analytics
MCP
getFormAnalytics

GET/forms/{id}/submissions

List submissions

Scopesforms:readReads

Newest first. Each row keeps the answers as they were sent, labels included, so it still reads right after the form changes.

Requires the forms:read scope.

Path parameters

idstringRequired

The form id, frm_ plus 24 hex.

Query parameters

limitinteger

Rows per page, 1 to 100.

At least 1At most 100Default25
cursorstring

A submission id of this form. Keyset, not offset: pass the previous page's nextCursor. One that names nothing in this list is a 400 invalid_cursor.

qstring

Only submissions whose email address contains this text, ignoring case.

Up to 200 characters
statusstring

Only pending or only added submissions.

One of"pending""added"

Returns

A page of submissions.

Errors

400

invalid_cursor when the cursor names no submission of this form.

404

form_not_found when the id names no form you can reach.

The errors every operation can return401403422429500Error catalog

Also available in

TypeScript
nextmail.forms.listSubmissions()nextmail.forms.listAllSubmissions()nextmail.forms.iterateSubmissions()
Python
forms.list_submissions()forms.list_all_submissions()forms.iterate_submissions()
Ruby
forms.list_submissionsforms.list_all_submissionsforms.iterate_submissions
PHP
forms->listSubmissionsforms->listAllSubmissionsforms->iterateSubmissions
Go
Forms.ListSubmissionsForms.ListAllSubmissionsForms.IterateSubmissions
Java
forms().listSubmissionsforms().listAllSubmissionsforms().iterateSubmissions
C#
Forms.ListSubmissionsAsyncForms.ListAllSubmissionsAsyncForms.IterateSubmissionsAsync
CLI
nextmail forms list-submissions
MCP
listFormSubmissions

POST/forms/{id}/submissions/batch-remove

Delete submissions

Scopesforms:writeDeletes

Deletes up to 200 submissions of this form in one call and answers with how many went. A person a submission added stays in your contacts and audiences. A pending one can no longer be confirmed.

Requires the forms:write scope.

Path parameters

idstringRequired

The form id, frm_ plus 24 hex.

Request body

idsstring[]Required

Submission ids of this form. An id that names nothing is skipped.

1 to 200 items

Returns

Errors

404

form_not_found when the id names no form you can reach.

The errors every operation can return400401403422429500Error catalog

Also available in

TypeScript
nextmail.forms.deleteSubmissions()
Python
forms.delete_submissions()
Ruby
forms.delete_submissions
PHP
forms->deleteSubmissions
Go
Forms.DeleteSubmissions
Java
forms().deleteSubmissions
C#
Forms.DeleteSubmissionsAsync
CLI
nextmail forms delete-submissions
MCP
removeFormSubmissions

GET/forms/{id}/submissions/{submissionId}

Retrieve a submission

Scopesforms:readReads

One submission with every answer.

Requires the forms:read scope.

Path parameters

idstringRequired

The form id, frm_ plus 24 hex.

submissionIdstringRequired

The submission id, fsb_ plus 24 hex.

Returns

The submission.

Errors

404

form_not_found, or form_submission_not_found when the form has no such submission.

The errors every operation can return400401403422429500Error catalog

Also available in

TypeScript
nextmail.forms.getSubmission()
Python
forms.get_submission()
Ruby
forms.get_submission
PHP
forms->getSubmission
Go
Forms.GetSubmission
Java
forms().getSubmission
C#
Forms.GetSubmissionAsync
CLI
nextmail forms get-submission
MCP
getFormSubmission

DELETE/forms/{id}/submissions/{submissionId}

Delete a submission

Scopesforms:writeDeletes

Deletes the submission. The person it added stays in your contacts and audiences, and a pending one can no longer be confirmed.

Requires the forms:write scope.

Path parameters

idstringRequired

The form id, frm_ plus 24 hex.

submissionIdstringRequired

The submission id, fsb_ plus 24 hex.

Returns

Errors

The errors every operation can return400401403422429500Error catalog

Also available in

TypeScript
nextmail.forms.deleteSubmission()
Python
forms.delete_submission()
Ruby
forms.delete_submission
PHP
forms->deleteSubmission
Go
Forms.DeleteSubmission
Java
forms().deleteSubmission
C#
Forms.DeleteSubmissionAsync
CLI
nextmail forms delete-submission
MCP
removeFormSubmissions

POST/forms/{id}/submissions/{submissionId}/approve

Approve a submission

Scopesforms:writecontacts:writeChanges data

Adds the person of a pending submission to its audiences without waiting for them to confirm, for when you know them. It does not resubscribe someone who unsubscribed from an audience, as their own confirmation would. An added submission is returned as it is. No body.

Requires the forms:write and contacts:write scopes.

Path parameters

idstringRequired

The form id, frm_ plus 24 hex.

submissionIdstringRequired

The submission id, fsb_ plus 24 hex.

Returns

The submission, now added.

Errors

The errors every operation can return400401403422429500Error catalog

Also available in

TypeScript
nextmail.forms.approveSubmission()
Python
forms.approve_submission()
Ruby
forms.approve_submission
PHP
forms->approveSubmission
Go
Forms.ApproveSubmission
Java
forms().approveSubmission
C#
Forms.ApproveSubmissionAsync
CLI
nextmail forms approve-submission
MCP
approveFormSubmission

POST/forms/{id}/submissions/{submissionId}/resend

Resend a confirmation

Scopesforms:writeemails:sendSends mail

Emails a pending submission a fresh confirmation link from the form's senderAddress. To protect the person, one address gets at most one confirmation per form every ten minutes and five a day across the workspace. A call that runs into those limits, or one for an added submission, sends nothing and answers confirmationSent: false. No body.

Requires the forms:write and emails:send scopes.

Path parameters

idstringRequired

The form id, frm_ plus 24 hex.

submissionIdstringRequired

The submission id, fsb_ plus 24 hex.

Returns

200object

The submission.

objectstring
One of"form_submission"
idstring

The durable handle, fsb_ plus 24 hex.

formIdstring
emailstring

The address the person signed up with, lower cased.

statusstring

added once the person is a contact in the audiences. pending while a double opt-in form waits for them to confirm.

One of"pending""added"
expiredboolean

True for a pending submission whose confirmation link has run out. Approve it, or send a fresh link.

answersFormAnswer[]

A snapshot of every answer, kept as it was even after the form changes.

audienceIdsstring[]
sourceUrlstring

The page the form was filled in on, its origin and path only and at most 500 characters, when it was known.

Can be null
confirmedAtstring

When the person joined the audiences. Null while pending.

Can be nullFormatdate-time
createdAtstring
Formatdate-time
confirmationSentboolean

Whether an email went out on this call.

Errors

422

form_sender_refused when confirmations cannot go out from the form's address.

The errors every operation can return400401403429500Error catalog

Also available in

TypeScript
nextmail.forms.resendConfirmation()
Python
forms.resend_confirmation()
Ruby
forms.resend_confirmation
PHP
forms->resendConfirmation
Go
Forms.ResendConfirmation
Java
forms().resendConfirmation
C#
Forms.ResendConfirmationAsync
CLI
nextmail forms resend-confirmation
MCP
resendFormConfirmation

POST/subscribe/{formId}

Sign up through a form

No scopeNo credentialChanges data

Takes no credential: this is where a published form's visitors post. A browser <form method="post"> sends its fields form encoded and is redirected with a 303 to the form's thank-you page or to its redirect. A script that sends Accept: application/json or a JSON body gets JSON answers and the error codes below instead. Cross-origin requests are allowed.

A form that lists the sites that may use it (settings.allowedSites) takes sign-ups only from those. The site is the Origin header a browser sends, or the Referer when there is none, so another website cannot post to it from a visitor's browser. A path in a rule is checked whenever the page address is known, from the Referer or from oe_source. A server has neither header, so it names the page in oe_source; a request that names no site at all is refused. This keeps other websites out, and it is not a secret: anything that is not a browser can send any address.

On a double opt-in form the person is emailed a confirmation link and joins the audiences once they open it, so outcome is pending. Signing up again before confirming updates that pending submission rather than storing another. Otherwise they join at once and outcome is added.

A person who unsubscribed stays unsubscribed unless they confirm from their inbox: on a form with a sending address they are emailed a confirmation link even when the form does not ask everyone for one, so outcome is pending, and opening it is fresh consent that subscribes them again. On a form without one they join its audiences still unsubscribed. Sign-ups are limited to 40 every 10 minutes from one network, and a submission that looks automated gets a normal answer and is dropped.

A sign-up that carries a bot check token is verified: the cf-turnstile-response field a Cloudflare Turnstile widget adds to the form, oe_bot_check, or the X-Bot-Check header. A token that does not pass is refused with 403 bot_check_failed and nothing is stored. A sign-up without a token is judged by the checks above.

Path parameters

formIdstringRequired

The id of a published form.

Request body

Content typeapplication/json, application/x-www-form-urlencoded, multipart/form-data

emailstring

The field keyed email, which every form has.

valuesobject

The answers again, for a client that would rather nest them.

oe_sourcestring

The page the form was filled in on. Defaults to the Referer header.

Returns

Signed up, for a JSON caller.

303

Signed up or refused, for a browser form: follow the Location header.

Errors

400

malformed_json when a JSON body does not parse or is not an object.

403

form_site_not_allowed when the form lists the sites that may use it and the sign-up came from another one, or named none. bot_check_failed when the sign-up carried a bot check token that did not pass.

404

form_not_found when no published form has that id.

409

form_closed when the form is paused.

422

invalid_form_submission when an answer is missing or not valid. The error carries fields, one entry per problem with the field key and the reason.

429

form_rate_limited when too many sign-ups came from the same network.

The errors every operation can return500Error catalog

Also available in

TypeScript
nextmail.forms.subscribe()
Python
forms.subscribe()
Ruby
forms.subscribe
PHP
forms->subscribe
Go
Forms.Subscribe
Java
forms().subscribe
C#
Forms.SubscribeAsync
CLI
nextmail forms subscribe

POST/forms/design

Design a form from a brief

Scopesforms:writeChanges data

A designer builds a new sign-up form from a written brief, as Create with AI does on the Forms page of the app: it picks the fields, writes the copy and sets the look, then saves the form as a draft. Publish it with POST /forms/{id}/publish. It spends one AI action and can take up to half a minute.

Requires the forms:write scope.

Request body

briefstringRequired

Everything the form must ask and say, up to 4,000 characters.

1 to 4000 characters
namestring

A short name for the form, up to 120 characters. Left out, the designer names it.

1 to 120 characters

Returns

201object

The new form, a draft.

objectstring
One of"form"
idstring

The durable handle, frm_ plus 24 hex.

namestring

What the workspace calls the form. Visitors never see it.

descriptionstring
Can be null
statusstring

draft until the first publish, then live while it takes sign-ups and paused while it does not. A form never goes back to draft.

One of"draft""live""paused"
urlstring

The hosted page that shows the published form. Share it as a link, or add ?embed=1 for the frame the embed script loads.

subscribeUrlstring

Where a plain HTML <form method="post"> sends its fields, and where a script posts JSON for a JSON answer.

audienceIdsstring[]

The audiences every sign-up joins, besides the default audience that holds every contact. An audiences field adds the ones the person ticks.

doubleOptInboolean

Whether a sign-up waits for the person to confirm their address by email.

hasUnpublishedChangesboolean

True when the draft document differs from what the live form shows. Always false before the first publish.

publishedAtstring
Can be nullFormatdate-time
createdAtstring
Formatdate-time
updatedAtstring

Send it back as expectedUpdatedAt on PATCH /forms/{id} to refuse a save that would overwrite someone else's.

Formatdate-time
documentobject

Everything a visitor sees: fields in order, the copy around them and the style. Every form has exactly one email field, and every input field has a unique key that answers are posted under.

fieldsobject[]Required
1 to 50 items
idstringRequired
1 to 64 characters
typestringRequired
One of"email""text""textarea""number""phone""url""date""select""radio""checkboxes""checkbox""consent""audiences""hidden""heading""paragraph""divider"
keystringRequired
Up to 40 charactersPattern^[a-z][a-z0-9_]{0,39}$
labelstringRequired
Up to 300 characters
placeholderstringRequired
Can be nullUp to 200 characters
helpstringRequired
Can be nullUp to 1000 characters
requiredbooleanRequired
defaultValuestringRequired
Can be nullUp to 1000 characters
optionsobject[]Required
Up to 50 items
idstringRequired
1 to 64 characters
labelstringRequired
1 to 300 characters
valuestringRequired
1 to 1000 characters
mapsTostringRequired

The contact detail this field fills when the sign-up is accepted, or null for none. email goes on the email field. firstName, lastName, name, company and jobTitle go on a text field, phone on a phone field, website on a url field and birthday on a date field. One field per detail, and name never together with firstName or lastName. The name is saved on the contact. The phone number, company, job title, website and birthday are saved on the contact card, and only where the card has nothing yet: a company, job title or birthday already there is kept, and a phone number or website the card already lists is not added again.

Can be nullOne of"email""firstName""lastName""name""phone""company""jobTitle""website""birthday"
saveAsstring

A custom field of the contact this field fills when the sign-up is accepted, such as plan, or null for none. A key starts with a letter and holds up to 64 letters, digits and underscores. The answer replaces the field of that name on the contact, an empty answer leaves it alone, and a choice of several options is saved as their labels joined by commas. Not on the email field or an audience choice, one field per custom field, and never together with mapsTo. Left out when a form is updated, a field keeps the custom field it had.

Can be nullPattern^[A-Za-z][A-Za-z0-9_]{0,63}$
widthstringRequired
One of"full""half"
minLengthintegerRequired
Can be nullAt least 0At most 5000
maxLengthintegerRequired
Can be nullAt least 1At most 5000
minnumberRequired
Can be nullAt least -1000000000000At most 1000000000000
maxnumberRequired
Can be nullAt least -1000000000000At most 1000000000000
copyobjectRequired
titlestringRequired
Up to 200 characters
descriptionstringRequired
Can be nullUp to 2000 characters
submitLabelstringRequired
1 to 60 characters
successTitlestringRequired
Up to 200 characters
successMessagestringRequired
Up to 2000 characters
pendingTitlestringRequired
Up to 200 characters
pendingMessagestringRequired
Up to 2000 characters
closedTitlestringRequired
Up to 200 characters
closedMessagestringRequired
Up to 2000 characters
footerstringRequired
Can be nullUp to 2000 characters
styleobjectRequired
accentstringRequired
Pattern^#[0-9a-fA-F]{6}$
backgroundstringRequired
Pattern^#[0-9a-fA-F]{6}$
surfacestringRequired
Pattern^#[0-9a-fA-F]{6}$
textstringRequired
Pattern^#[0-9a-fA-F]{6}$
fontstringRequired
One of"system""sans""serif""mono"
radiusstringRequired
One of"none""sm""md""lg""full"
widthstringRequired
One of"narrow""normal""wide"
layoutstringRequired
One of"card""plain"
alignstringRequired
One of"left""center"
logoUrlstringRequired
Can be nullUp to 2000 charactersFormaturi
publishedDocumentobject

Everything a visitor sees: fields in order, the copy around them and the style. Every form has exactly one email field, and every input field has a unique key that answers are posted under.

Can be null
fieldsobject[]Required
1 to 50 items
idstringRequired
1 to 64 characters
typestringRequired
One of"email""text""textarea""number""phone""url""date""select""radio""checkboxes""checkbox""consent""audiences""hidden""heading""paragraph""divider"
keystringRequired
Up to 40 charactersPattern^[a-z][a-z0-9_]{0,39}$
labelstringRequired
Up to 300 characters
placeholderstringRequired
Can be nullUp to 200 characters
helpstringRequired
Can be nullUp to 1000 characters
requiredbooleanRequired
defaultValuestringRequired
Can be nullUp to 1000 characters
optionsobject[]Required
Up to 50 items
idstringRequired
1 to 64 characters
labelstringRequired
1 to 300 characters
valuestringRequired
1 to 1000 characters
mapsTostringRequired

The contact detail this field fills when the sign-up is accepted, or null for none. email goes on the email field. firstName, lastName, name, company and jobTitle go on a text field, phone on a phone field, website on a url field and birthday on a date field. One field per detail, and name never together with firstName or lastName. The name is saved on the contact. The phone number, company, job title, website and birthday are saved on the contact card, and only where the card has nothing yet: a company, job title or birthday already there is kept, and a phone number or website the card already lists is not added again.

Can be nullOne of"email""firstName""lastName""name""phone""company""jobTitle""website""birthday"
saveAsstring

A custom field of the contact this field fills when the sign-up is accepted, such as plan, or null for none. A key starts with a letter and holds up to 64 letters, digits and underscores. The answer replaces the field of that name on the contact, an empty answer leaves it alone, and a choice of several options is saved as their labels joined by commas. Not on the email field or an audience choice, one field per custom field, and never together with mapsTo. Left out when a form is updated, a field keeps the custom field it had.

Can be nullPattern^[A-Za-z][A-Za-z0-9_]{0,63}$
widthstringRequired
One of"full""half"
minLengthintegerRequired
Can be nullAt least 0At most 5000
maxLengthintegerRequired
Can be nullAt least 1At most 5000
minnumberRequired
Can be nullAt least -1000000000000At most 1000000000000
maxnumberRequired
Can be nullAt least -1000000000000At most 1000000000000
copyobjectRequired
titlestringRequired
Up to 200 characters
descriptionstringRequired
Can be nullUp to 2000 characters
submitLabelstringRequired
1 to 60 characters
successTitlestringRequired
Up to 200 characters
successMessagestringRequired
Up to 2000 characters
pendingTitlestringRequired
Up to 200 characters
pendingMessagestringRequired
Up to 2000 characters
closedTitlestringRequired
Up to 200 characters
closedMessagestringRequired
Up to 2000 characters
footerstringRequired
Can be nullUp to 2000 characters
styleobjectRequired
accentstringRequired
Pattern^#[0-9a-fA-F]{6}$
backgroundstringRequired
Pattern^#[0-9a-fA-F]{6}$
surfacestringRequired
Pattern^#[0-9a-fA-F]{6}$
textstringRequired
Pattern^#[0-9a-fA-F]{6}$
fontstringRequired
One of"system""sans""serif""mono"
radiusstringRequired
One of"none""sm""md""lg""full"
widthstringRequired
One of"narrow""normal""wide"
layoutstringRequired
One of"card""plain"
alignstringRequired
One of"left""center"
logoUrlstringRequired
Can be nullUp to 2000 charactersFormaturi
settingsobject

Where sign-ups go and what happens after one.

audienceIdsstring[]Required
Up to 20 items
doubleOptInbooleanRequired
senderAddressstringRequired
Can be nullUp to 2000 characters
confirmSubjectstringRequired
1 to 200 characters
confirmMessagestringRequired
Up to 2000 characters
confirmButtonstringRequired
1 to 60 characters
successActionstringRequired
One of"message""redirect"
redirectUrlstringRequired
Can be nullUp to 2000 charactersFormaturi
notifyAddressesstring[]Required
Up to 10 items
allowedSitesstring[]

The sites that may show this form or post to it, at most 20: a domain (example.com, which covers www.example.com too), every subdomain of one (*.example.com), or either with a path (example.com/pricing, example.com/blog/*). A scheme or a port narrows it further (https://example.com, localhost:3000). An empty list means any site. The form's own page always works.

Up to 20 items
audiencesFormAudience[]

The audiences in audienceIds with their names.

senderIssuestring

Why confirmation emails cannot go out right now, for a form with doubleOptIn on. missing means no senderAddress is set, not_sendable that the address cannot send, not_allowed that the form's maker may not send as it. Null when they can go out, and always null with doubleOptIn off.

Can be nullOne of"missing""not_sendable""not_allowed"
senderProblemstring

The same problem in a sentence, or null.

Can be null
designobject
notesstring[]

What the designer adjusted or left out while making the design valid.

Errors

409

ai_not_configured: this server has no model to design with. version_conflict: the form was saved since expectedUpdatedAt, or while the designer worked, and nothing was written.

422

invalid_form when the designer could not make a valid form, so nothing was created or changed. workspace_limit_reached when the workspace already holds as many forms as it may. invalid_parameter for a body that does not validate.

429

ai_quota_exceeded: the workspace has used its AI actions for today.

rate_limited: the key or app made more than 600 requests in 60 seconds. Wait for the seconds in Retry-After.

The errors every operation can return400401403404500Error catalog

Also available in

TypeScript
nextmail.forms.design()
Python
forms.design()
Ruby
forms.design
PHP
forms->design
Go
Forms.Design
Java
forms().design
C#
Forms.DesignAsync
CLI
nextmail forms design
MCP
designForm

POST/forms/{id}/redesign

Change a form’s design from instructions

Scopesforms:writeChanges data

A designer applies written instructions to the draft of the form and leaves the rest alone, as Ask AI does in the form builder of the app: add, remove or reorder fields, rewrite or translate the copy, change colours or fonts. The change is saved to the draft, and a live form keeps showing its published version until POST /forms/{id}/publish. It spends one AI action and can take up to half a minute.

Requires the forms:write scope.

Path parameters

idstringRequired

Form id such as frm_8d2f6a1c9b3e47d0a5f1c2e9.

Request body

instructionsstringRequired

What to change, with every detail, up to 4,000 characters.

1 to 4000 characters
expectedUpdatedAtstring

The updatedAt you read, as it came. When the form was saved since, nothing is written and the answer is 409 version_conflict.

Formatdate-time

Returns

200object

The form, with the change in its draft.

objectstring
One of"form"
idstring

The durable handle, frm_ plus 24 hex.

namestring

What the workspace calls the form. Visitors never see it.

descriptionstring
Can be null
statusstring

draft until the first publish, then live while it takes sign-ups and paused while it does not. A form never goes back to draft.

One of"draft""live""paused"
urlstring

The hosted page that shows the published form. Share it as a link, or add ?embed=1 for the frame the embed script loads.

subscribeUrlstring

Where a plain HTML <form method="post"> sends its fields, and where a script posts JSON for a JSON answer.

audienceIdsstring[]

The audiences every sign-up joins, besides the default audience that holds every contact. An audiences field adds the ones the person ticks.

doubleOptInboolean

Whether a sign-up waits for the person to confirm their address by email.

hasUnpublishedChangesboolean

True when the draft document differs from what the live form shows. Always false before the first publish.

publishedAtstring
Can be nullFormatdate-time
createdAtstring
Formatdate-time
updatedAtstring

Send it back as expectedUpdatedAt on PATCH /forms/{id} to refuse a save that would overwrite someone else's.

Formatdate-time
documentobject

Everything a visitor sees: fields in order, the copy around them and the style. Every form has exactly one email field, and every input field has a unique key that answers are posted under.

fieldsobject[]Required
1 to 50 items
idstringRequired
1 to 64 characters
typestringRequired
One of"email""text""textarea""number""phone""url""date""select""radio""checkboxes""checkbox""consent""audiences""hidden""heading""paragraph""divider"
keystringRequired
Up to 40 charactersPattern^[a-z][a-z0-9_]{0,39}$
labelstringRequired
Up to 300 characters
placeholderstringRequired
Can be nullUp to 200 characters
helpstringRequired
Can be nullUp to 1000 characters
requiredbooleanRequired
defaultValuestringRequired
Can be nullUp to 1000 characters
optionsobject[]Required
Up to 50 items
idstringRequired
1 to 64 characters
labelstringRequired
1 to 300 characters
valuestringRequired
1 to 1000 characters
mapsTostringRequired

The contact detail this field fills when the sign-up is accepted, or null for none. email goes on the email field. firstName, lastName, name, company and jobTitle go on a text field, phone on a phone field, website on a url field and birthday on a date field. One field per detail, and name never together with firstName or lastName. The name is saved on the contact. The phone number, company, job title, website and birthday are saved on the contact card, and only where the card has nothing yet: a company, job title or birthday already there is kept, and a phone number or website the card already lists is not added again.

Can be nullOne of"email""firstName""lastName""name""phone""company""jobTitle""website""birthday"
saveAsstring

A custom field of the contact this field fills when the sign-up is accepted, such as plan, or null for none. A key starts with a letter and holds up to 64 letters, digits and underscores. The answer replaces the field of that name on the contact, an empty answer leaves it alone, and a choice of several options is saved as their labels joined by commas. Not on the email field or an audience choice, one field per custom field, and never together with mapsTo. Left out when a form is updated, a field keeps the custom field it had.

Can be nullPattern^[A-Za-z][A-Za-z0-9_]{0,63}$
widthstringRequired
One of"full""half"
minLengthintegerRequired
Can be nullAt least 0At most 5000
maxLengthintegerRequired
Can be nullAt least 1At most 5000
minnumberRequired
Can be nullAt least -1000000000000At most 1000000000000
maxnumberRequired
Can be nullAt least -1000000000000At most 1000000000000
copyobjectRequired
titlestringRequired
Up to 200 characters
descriptionstringRequired
Can be nullUp to 2000 characters
submitLabelstringRequired
1 to 60 characters
successTitlestringRequired
Up to 200 characters
successMessagestringRequired
Up to 2000 characters
pendingTitlestringRequired
Up to 200 characters
pendingMessagestringRequired
Up to 2000 characters
closedTitlestringRequired
Up to 200 characters
closedMessagestringRequired
Up to 2000 characters
footerstringRequired
Can be nullUp to 2000 characters
styleobjectRequired
accentstringRequired
Pattern^#[0-9a-fA-F]{6}$
backgroundstringRequired
Pattern^#[0-9a-fA-F]{6}$
surfacestringRequired
Pattern^#[0-9a-fA-F]{6}$
textstringRequired
Pattern^#[0-9a-fA-F]{6}$
fontstringRequired
One of"system""sans""serif""mono"
radiusstringRequired
One of"none""sm""md""lg""full"
widthstringRequired
One of"narrow""normal""wide"
layoutstringRequired
One of"card""plain"
alignstringRequired
One of"left""center"
logoUrlstringRequired
Can be nullUp to 2000 charactersFormaturi
publishedDocumentobject

Everything a visitor sees: fields in order, the copy around them and the style. Every form has exactly one email field, and every input field has a unique key that answers are posted under.

Can be null
fieldsobject[]Required
1 to 50 items
idstringRequired
1 to 64 characters
typestringRequired
One of"email""text""textarea""number""phone""url""date""select""radio""checkboxes""checkbox""consent""audiences""hidden""heading""paragraph""divider"
keystringRequired
Up to 40 charactersPattern^[a-z][a-z0-9_]{0,39}$
labelstringRequired
Up to 300 characters
placeholderstringRequired
Can be nullUp to 200 characters
helpstringRequired
Can be nullUp to 1000 characters
requiredbooleanRequired
defaultValuestringRequired
Can be nullUp to 1000 characters
optionsobject[]Required
Up to 50 items
idstringRequired
1 to 64 characters
labelstringRequired
1 to 300 characters
valuestringRequired
1 to 1000 characters
mapsTostringRequired

The contact detail this field fills when the sign-up is accepted, or null for none. email goes on the email field. firstName, lastName, name, company and jobTitle go on a text field, phone on a phone field, website on a url field and birthday on a date field. One field per detail, and name never together with firstName or lastName. The name is saved on the contact. The phone number, company, job title, website and birthday are saved on the contact card, and only where the card has nothing yet: a company, job title or birthday already there is kept, and a phone number or website the card already lists is not added again.

Can be nullOne of"email""firstName""lastName""name""phone""company""jobTitle""website""birthday"
saveAsstring

A custom field of the contact this field fills when the sign-up is accepted, such as plan, or null for none. A key starts with a letter and holds up to 64 letters, digits and underscores. The answer replaces the field of that name on the contact, an empty answer leaves it alone, and a choice of several options is saved as their labels joined by commas. Not on the email field or an audience choice, one field per custom field, and never together with mapsTo. Left out when a form is updated, a field keeps the custom field it had.

Can be nullPattern^[A-Za-z][A-Za-z0-9_]{0,63}$
widthstringRequired
One of"full""half"
minLengthintegerRequired
Can be nullAt least 0At most 5000
maxLengthintegerRequired
Can be nullAt least 1At most 5000
minnumberRequired
Can be nullAt least -1000000000000At most 1000000000000
maxnumberRequired
Can be nullAt least -1000000000000At most 1000000000000
copyobjectRequired
titlestringRequired
Up to 200 characters
descriptionstringRequired
Can be nullUp to 2000 characters
submitLabelstringRequired
1 to 60 characters
successTitlestringRequired
Up to 200 characters
successMessagestringRequired
Up to 2000 characters
pendingTitlestringRequired
Up to 200 characters
pendingMessagestringRequired
Up to 2000 characters
closedTitlestringRequired
Up to 200 characters
closedMessagestringRequired
Up to 2000 characters
footerstringRequired
Can be nullUp to 2000 characters
styleobjectRequired
accentstringRequired
Pattern^#[0-9a-fA-F]{6}$
backgroundstringRequired
Pattern^#[0-9a-fA-F]{6}$
surfacestringRequired
Pattern^#[0-9a-fA-F]{6}$
textstringRequired
Pattern^#[0-9a-fA-F]{6}$
fontstringRequired
One of"system""sans""serif""mono"
radiusstringRequired
One of"none""sm""md""lg""full"
widthstringRequired
One of"narrow""normal""wide"
layoutstringRequired
One of"card""plain"
alignstringRequired
One of"left""center"
logoUrlstringRequired
Can be nullUp to 2000 charactersFormaturi
settingsobject

Where sign-ups go and what happens after one.

audienceIdsstring[]Required
Up to 20 items
doubleOptInbooleanRequired
senderAddressstringRequired
Can be nullUp to 2000 characters
confirmSubjectstringRequired
1 to 200 characters
confirmMessagestringRequired
Up to 2000 characters
confirmButtonstringRequired
1 to 60 characters
successActionstringRequired
One of"message""redirect"
redirectUrlstringRequired
Can be nullUp to 2000 charactersFormaturi
notifyAddressesstring[]Required
Up to 10 items
allowedSitesstring[]

The sites that may show this form or post to it, at most 20: a domain (example.com, which covers www.example.com too), every subdomain of one (*.example.com), or either with a path (example.com/pricing, example.com/blog/*). A scheme or a port narrows it further (https://example.com, localhost:3000). An empty list means any site. The form's own page always works.

Up to 20 items
audiencesFormAudience[]

The audiences in audienceIds with their names.

senderIssuestring

Why confirmation emails cannot go out right now, for a form with doubleOptIn on. missing means no senderAddress is set, not_sendable that the address cannot send, not_allowed that the form's maker may not send as it. Null when they can go out, and always null with doubleOptIn off.

Can be nullOne of"missing""not_sendable""not_allowed"
senderProblemstring

The same problem in a sentence, or null.

Can be null
designobject
notesstring[]

What the designer adjusted or left out while making the design valid.

Errors

409

ai_not_configured: this server has no model to design with. version_conflict: the form was saved since expectedUpdatedAt, or while the designer worked, and nothing was written.

422

invalid_form when the designer could not make a valid form, so nothing was created or changed. workspace_limit_reached when the workspace already holds as many forms as it may. invalid_parameter for a body that does not validate.

429

ai_quota_exceeded: the workspace has used its AI actions for today.

rate_limited: the key or app made more than 600 requests in 60 seconds. Wait for the seconds in Retry-After.

The errors every operation can return400401403404500Error catalog

Also available in

TypeScript
nextmail.forms.redesign()
Python
forms.redesign()
Ruby
forms.redesign
PHP
forms->redesign
Go
Forms.Redesign
Java
forms().redesign
C#
Forms.RedesignAsync
CLI
nextmail forms redesign
MCP
editFormDesign

Objects

DeletedFormobject

objectstring
One of"form"
idstring
deletedboolean
One oftrue

DeletedFormSubmissionobject

objectstring
One of"form_submission"
idstring
formIdstring
deletedboolean
One oftrue

Formobject

objectstring
One of"form"
idstring

The durable handle, frm_ plus 24 hex.

namestring

What the workspace calls the form. Visitors never see it.

descriptionstring
Can be null
statusstring

draft until the first publish, then live while it takes sign-ups and paused while it does not. A form never goes back to draft.

One of"draft""live""paused"
urlstring

The hosted page that shows the published form. Share it as a link, or add ?embed=1 for the frame the embed script loads.

subscribeUrlstring

Where a plain HTML <form method="post"> sends its fields, and where a script posts JSON for a JSON answer.

audienceIdsstring[]

The audiences every sign-up joins, besides the default audience that holds every contact. An audiences field adds the ones the person ticks.

doubleOptInboolean

Whether a sign-up waits for the person to confirm their address by email.

hasUnpublishedChangesboolean

True when the draft document differs from what the live form shows. Always false before the first publish.

publishedAtstring
Can be nullFormatdate-time
createdAtstring
Formatdate-time
updatedAtstring

Send it back as expectedUpdatedAt on PATCH /forms/{id} to refuse a save that would overwrite someone else's.

Formatdate-time
documentobject

Everything a visitor sees: fields in order, the copy around them and the style. Every form has exactly one email field, and every input field has a unique key that answers are posted under.

fieldsobject[]Required
1 to 50 items
idstringRequired
1 to 64 characters
typestringRequired
One of"email""text""textarea""number""phone""url""date""select""radio""checkboxes""checkbox""consent""audiences""hidden""heading""paragraph""divider"
keystringRequired
Up to 40 charactersPattern^[a-z][a-z0-9_]{0,39}$
labelstringRequired
Up to 300 characters
placeholderstringRequired
Can be nullUp to 200 characters
helpstringRequired
Can be nullUp to 1000 characters
requiredbooleanRequired
defaultValuestringRequired
Can be nullUp to 1000 characters
optionsobject[]Required
Up to 50 items
idstringRequired
1 to 64 characters
labelstringRequired
1 to 300 characters
valuestringRequired
1 to 1000 characters
mapsTostringRequired

The contact detail this field fills when the sign-up is accepted, or null for none. email goes on the email field. firstName, lastName, name, company and jobTitle go on a text field, phone on a phone field, website on a url field and birthday on a date field. One field per detail, and name never together with firstName or lastName. The name is saved on the contact. The phone number, company, job title, website and birthday are saved on the contact card, and only where the card has nothing yet: a company, job title or birthday already there is kept, and a phone number or website the card already lists is not added again.

Can be nullOne of"email""firstName""lastName""name""phone""company""jobTitle""website""birthday"
saveAsstring

A custom field of the contact this field fills when the sign-up is accepted, such as plan, or null for none. A key starts with a letter and holds up to 64 letters, digits and underscores. The answer replaces the field of that name on the contact, an empty answer leaves it alone, and a choice of several options is saved as their labels joined by commas. Not on the email field or an audience choice, one field per custom field, and never together with mapsTo. Left out when a form is updated, a field keeps the custom field it had.

Can be nullPattern^[A-Za-z][A-Za-z0-9_]{0,63}$
widthstringRequired
One of"full""half"
minLengthintegerRequired
Can be nullAt least 0At most 5000
maxLengthintegerRequired
Can be nullAt least 1At most 5000
minnumberRequired
Can be nullAt least -1000000000000At most 1000000000000
maxnumberRequired
Can be nullAt least -1000000000000At most 1000000000000
copyobjectRequired
titlestringRequired
Up to 200 characters
descriptionstringRequired
Can be nullUp to 2000 characters
submitLabelstringRequired
1 to 60 characters
successTitlestringRequired
Up to 200 characters
successMessagestringRequired
Up to 2000 characters
pendingTitlestringRequired
Up to 200 characters
pendingMessagestringRequired
Up to 2000 characters
closedTitlestringRequired
Up to 200 characters
closedMessagestringRequired
Up to 2000 characters
footerstringRequired
Can be nullUp to 2000 characters
styleobjectRequired
accentstringRequired
Pattern^#[0-9a-fA-F]{6}$
backgroundstringRequired
Pattern^#[0-9a-fA-F]{6}$
surfacestringRequired
Pattern^#[0-9a-fA-F]{6}$
textstringRequired
Pattern^#[0-9a-fA-F]{6}$
fontstringRequired
One of"system""sans""serif""mono"
radiusstringRequired
One of"none""sm""md""lg""full"
widthstringRequired
One of"narrow""normal""wide"
layoutstringRequired
One of"card""plain"
alignstringRequired
One of"left""center"
logoUrlstringRequired
Can be nullUp to 2000 charactersFormaturi
publishedDocumentobject

Everything a visitor sees: fields in order, the copy around them and the style. Every form has exactly one email field, and every input field has a unique key that answers are posted under.

Can be null
fieldsobject[]Required
1 to 50 items
idstringRequired
1 to 64 characters
typestringRequired
One of"email""text""textarea""number""phone""url""date""select""radio""checkboxes""checkbox""consent""audiences""hidden""heading""paragraph""divider"
keystringRequired
Up to 40 charactersPattern^[a-z][a-z0-9_]{0,39}$
labelstringRequired
Up to 300 characters
placeholderstringRequired
Can be nullUp to 200 characters
helpstringRequired
Can be nullUp to 1000 characters
requiredbooleanRequired
defaultValuestringRequired
Can be nullUp to 1000 characters
optionsobject[]Required
Up to 50 items
idstringRequired
1 to 64 characters
labelstringRequired
1 to 300 characters
valuestringRequired
1 to 1000 characters
mapsTostringRequired

The contact detail this field fills when the sign-up is accepted, or null for none. email goes on the email field. firstName, lastName, name, company and jobTitle go on a text field, phone on a phone field, website on a url field and birthday on a date field. One field per detail, and name never together with firstName or lastName. The name is saved on the contact. The phone number, company, job title, website and birthday are saved on the contact card, and only where the card has nothing yet: a company, job title or birthday already there is kept, and a phone number or website the card already lists is not added again.

Can be nullOne of"email""firstName""lastName""name""phone""company""jobTitle""website""birthday"
saveAsstring

A custom field of the contact this field fills when the sign-up is accepted, such as plan, or null for none. A key starts with a letter and holds up to 64 letters, digits and underscores. The answer replaces the field of that name on the contact, an empty answer leaves it alone, and a choice of several options is saved as their labels joined by commas. Not on the email field or an audience choice, one field per custom field, and never together with mapsTo. Left out when a form is updated, a field keeps the custom field it had.

Can be nullPattern^[A-Za-z][A-Za-z0-9_]{0,63}$
widthstringRequired
One of"full""half"
minLengthintegerRequired
Can be nullAt least 0At most 5000
maxLengthintegerRequired
Can be nullAt least 1At most 5000
minnumberRequired
Can be nullAt least -1000000000000At most 1000000000000
maxnumberRequired
Can be nullAt least -1000000000000At most 1000000000000
copyobjectRequired
titlestringRequired
Up to 200 characters
descriptionstringRequired
Can be nullUp to 2000 characters
submitLabelstringRequired
1 to 60 characters
successTitlestringRequired
Up to 200 characters
successMessagestringRequired
Up to 2000 characters
pendingTitlestringRequired
Up to 200 characters
pendingMessagestringRequired
Up to 2000 characters
closedTitlestringRequired
Up to 200 characters
closedMessagestringRequired
Up to 2000 characters
footerstringRequired
Can be nullUp to 2000 characters
styleobjectRequired
accentstringRequired
Pattern^#[0-9a-fA-F]{6}$
backgroundstringRequired
Pattern^#[0-9a-fA-F]{6}$
surfacestringRequired
Pattern^#[0-9a-fA-F]{6}$
textstringRequired
Pattern^#[0-9a-fA-F]{6}$
fontstringRequired
One of"system""sans""serif""mono"
radiusstringRequired
One of"none""sm""md""lg""full"
widthstringRequired
One of"narrow""normal""wide"
layoutstringRequired
One of"card""plain"
alignstringRequired
One of"left""center"
logoUrlstringRequired
Can be nullUp to 2000 charactersFormaturi
settingsobject

Where sign-ups go and what happens after one.

audienceIdsstring[]Required
Up to 20 items
doubleOptInbooleanRequired
senderAddressstringRequired
Can be nullUp to 2000 characters
confirmSubjectstringRequired
1 to 200 characters
confirmMessagestringRequired
Up to 2000 characters
confirmButtonstringRequired
1 to 60 characters
successActionstringRequired
One of"message""redirect"
redirectUrlstringRequired
Can be nullUp to 2000 charactersFormaturi
notifyAddressesstring[]Required
Up to 10 items
allowedSitesstring[]

The sites that may show this form or post to it, at most 20: a domain (example.com, which covers www.example.com too), every subdomain of one (*.example.com), or either with a path (example.com/pricing, example.com/blog/*). A scheme or a port narrows it further (https://example.com, localhost:3000). An empty list means any site. The form's own page always works.

Up to 20 items
audiencesFormAudience[]

The audiences in audienceIds with their names.

senderIssuestring

Why confirmation emails cannot go out right now, for a form with doubleOptIn on. missing means no senderAddress is set, not_sendable that the address cannot send, not_allowed that the form's maker may not send as it. Null when they can go out, and always null with doubleOptIn off.

Can be nullOne of"missing""not_sendable""not_allowed"
senderProblemstring

The same problem in a sentence, or null.

Can be null

FormAnalyticsobject

objectstring
One of"form_analytics"
formIdstring
sincestring
Formatdate-time
untilstring
Formatdate-time
grainstring
One of"minute""hour""day"
offsetMinutesinteger
totalsobject
viewsinteger

Times the hosted page or the embed was opened while the form was live.

submissionsinteger

Every submission stored, waiting or added.

addedinteger

Submissions whose person is in the audiences.

pendinginteger

Submissions still waiting for the person to confirm their address.

lastSubmittedAtstring
Can be nullFormatdate-time
conversionnumber

Submissions divided by views over the window, at most 1. Null with no views.

Can be null
seriesFormAnalyticsPoint[]

Sparse: a bucket with nothing in it is left out.

FormAnalyticsPointobject

bucketstring

YYYY-MM-DD for a day, YYYY-MM-DDTHH for an hour, YYYY-MM-DDTHH:MM for a minute.

viewsinteger
submissionsinteger
addedinteger

People who joined the audiences in the bucket, dated when they confirmed.

FormAnswerobject

fieldIdstring
keystring

The field key the value was posted under.

labelstring

The field label when the person signed up.

typestring
One of"email""text""textarea""number""phone""url""date""select""radio""checkboxes""checkbox""consent""audiences""hidden""heading""paragraph""divider"
valuestring | string[] | boolean

Text for most fields, a list for multiple choice, true or false for a checkbox.

displaystring

The value as a person reads it, option labels included.

FormAudienceobject

idstring
namestring
builtinboolean

True for the default audience every contact joins.

FormDocumentobject

Everything a visitor sees: fields in order, the copy around them and the style. Every form has exactly one email field, and every input field has a unique key that answers are posted under.

fieldsobject[]Required
1 to 50 items
idstringRequired
1 to 64 characters
typestringRequired
One of"email""text""textarea""number""phone""url""date""select""radio""checkboxes""checkbox""consent""audiences""hidden""heading""paragraph""divider"
keystringRequired
Up to 40 charactersPattern^[a-z][a-z0-9_]{0,39}$
labelstringRequired
Up to 300 characters
placeholderstringRequired
Can be nullUp to 200 characters
helpstringRequired
Can be nullUp to 1000 characters
requiredbooleanRequired
defaultValuestringRequired
Can be nullUp to 1000 characters
optionsobject[]Required
Up to 50 items
idstringRequired
1 to 64 characters
labelstringRequired
1 to 300 characters
valuestringRequired
1 to 1000 characters
mapsTostringRequired

The contact detail this field fills when the sign-up is accepted, or null for none. email goes on the email field. firstName, lastName, name, company and jobTitle go on a text field, phone on a phone field, website on a url field and birthday on a date field. One field per detail, and name never together with firstName or lastName. The name is saved on the contact. The phone number, company, job title, website and birthday are saved on the contact card, and only where the card has nothing yet: a company, job title or birthday already there is kept, and a phone number or website the card already lists is not added again.

Can be nullOne of"email""firstName""lastName""name""phone""company""jobTitle""website""birthday"
saveAsstring

A custom field of the contact this field fills when the sign-up is accepted, such as plan, or null for none. A key starts with a letter and holds up to 64 letters, digits and underscores. The answer replaces the field of that name on the contact, an empty answer leaves it alone, and a choice of several options is saved as their labels joined by commas. Not on the email field or an audience choice, one field per custom field, and never together with mapsTo. Left out when a form is updated, a field keeps the custom field it had.

Can be nullPattern^[A-Za-z][A-Za-z0-9_]{0,63}$
widthstringRequired
One of"full""half"
minLengthintegerRequired
Can be nullAt least 0At most 5000
maxLengthintegerRequired
Can be nullAt least 1At most 5000
minnumberRequired
Can be nullAt least -1000000000000At most 1000000000000
maxnumberRequired
Can be nullAt least -1000000000000At most 1000000000000
copyobjectRequired
titlestringRequired
Up to 200 characters
descriptionstringRequired
Can be nullUp to 2000 characters
submitLabelstringRequired
1 to 60 characters
successTitlestringRequired
Up to 200 characters
successMessagestringRequired
Up to 2000 characters
pendingTitlestringRequired
Up to 200 characters
pendingMessagestringRequired
Up to 2000 characters
closedTitlestringRequired
Up to 200 characters
closedMessagestringRequired
Up to 2000 characters
footerstringRequired
Can be nullUp to 2000 characters
styleobjectRequired
accentstringRequired
Pattern^#[0-9a-fA-F]{6}$
backgroundstringRequired
Pattern^#[0-9a-fA-F]{6}$
surfacestringRequired
Pattern^#[0-9a-fA-F]{6}$
textstringRequired
Pattern^#[0-9a-fA-F]{6}$
fontstringRequired
One of"system""sans""serif""mono"
radiusstringRequired
One of"none""sm""md""lg""full"
widthstringRequired
One of"narrow""normal""wide"
layoutstringRequired
One of"card""plain"
alignstringRequired
One of"left""center"
logoUrlstringRequired
Can be nullUp to 2000 charactersFormaturi

FormListobject

objectstring
One of"list"
hasMoreboolean

True when another page follows. Pass nextCursor back as cursor to read it.

nextCursorstring

An opaque cursor for the next page, or null on the last page. Pass it back unchanged.

Can be null

FormStarterobject

objectstring
One of"form_starter"
slugstring
One of"blank""newsletter""waitlist""event""early-access""contact"
namestring
descriptionstring

FormStarterDetailobject

objectstring
One of"form_starter"
slugstring
One of"blank""newsletter""waitlist""event""early-access""contact"
namestring
descriptionstring
documentFormDocument

FormStatsobject

viewsinteger

Times the hosted page or the embed was opened while the form was live.

submissionsinteger

Every submission stored, waiting or added.

addedinteger

Submissions whose person is in the audiences.

pendinginteger

Submissions still waiting for the person to confirm their address.

lastSubmittedAtstring
Can be nullFormatdate-time

FormSubmissionobject

objectstring
One of"form_submission"
idstring

The durable handle, fsb_ plus 24 hex.

formIdstring
emailstring

The address the person signed up with, lower cased.

statusstring

added once the person is a contact in the audiences. pending while a double opt-in form waits for them to confirm.

One of"pending""added"
expiredboolean

True for a pending submission whose confirmation link has run out. Approve it, or send a fresh link.

answersFormAnswer[]

A snapshot of every answer, kept as it was even after the form changes.

audienceIdsstring[]
sourceUrlstring

The page the form was filled in on, its origin and path only and at most 500 characters, when it was known.

Can be null
confirmedAtstring

When the person joined the audiences. Null while pending.

Can be nullFormatdate-time
createdAtstring
Formatdate-time

FormSubmissionBatchobject

objectstring
One of"form_submission_batch"
formIdstring
deletedinteger

How many submissions were deleted.

FormSubmissionListobject

objectstring
One of"list"
hasMoreboolean
nextCursorstring
Can be null
formIdstring

FormSubscriptionobject

objectstring
One of"form_subscription"
formIdstring
outcomestring

added when the person is in the audiences now. pending on a double opt-in form: they join once they confirm by email, and that email goes out after this answer unless this form emailed the address in the last ten minutes or the address has had five from this workspace today.

One of"added""pending"
redirectUrlstring

Where the form sends people after a sign-up, when it is set to redirect.

Can be null

FormSummaryobject

objectstring
One of"form"
idstring

The durable handle, frm_ plus 24 hex.

namestring

What the workspace calls the form. Visitors never see it.

descriptionstring
Can be null
statusstring

draft until the first publish, then live while it takes sign-ups and paused while it does not. A form never goes back to draft.

One of"draft""live""paused"
urlstring

The hosted page that shows the published form. Share it as a link, or add ?embed=1 for the frame the embed script loads.

subscribeUrlstring

Where a plain HTML <form method="post"> sends its fields, and where a script posts JSON for a JSON answer.

audienceIdsstring[]

The audiences every sign-up joins, besides the default audience that holds every contact. An audiences field adds the ones the person ticks.

doubleOptInboolean

Whether a sign-up waits for the person to confirm their address by email.

hasUnpublishedChangesboolean

True when the draft document differs from what the live form shows. Always false before the first publish.

publishedAtstring
Can be nullFormatdate-time
createdAtstring
Formatdate-time
updatedAtstring

Send it back as expectedUpdatedAt on PATCH /forms/{id} to refuse a save that would overwrite someone else's.

Formatdate-time