Tokens

Overview

The Tokens API provides endpoints for generating public tokens for form access.

Endpoints

Generate Token

Generate a public access token for a form.

Endpoint: POST /v1/tokens

Authentication: Not required

Request Body:

{
  "formId": "form_123",
  "expiresIn": 3600
}

Response: 201 Created

{
  "token": "token_abc123",
  "formId": "form_123",
  "expiresAt": "2024-01-01T01:00:00Z"
}

---

Usage

Public tokens provide temporary access to forms without requiring API keys.

Use Case

• Share forms with limited-time access

• Embed forms in third-party applications

• Temporary form access for testing

Example

// Generate token
const { token } = await fetch('/v1/tokens', {
  method: 'POST',
  body: JSON.stringify({
    formId: 'form_123',
    expiresIn: 3600 // 1 hour
  })
}).then(r => r.json());

// Use token to access form
const form = await fetch(`/forms/form_123?token=${token}`)
  .then(r => r.json());

Token Security

• Tokens expire after specified time

• Single-use tokens (optional)

• Rate limited per IP

• Revocable

Examples

Generate Token

curl -X POST https://api.formr.xyz/v1/tokens \
  -H "Content-Type: application/json" \
  -d '{
    "formId": "form_123",
    "expiresIn": 3600
  }'

Next Steps

• API Reference - API overview

• Forms API - Form management

• Authentication - Authentication details