Authentication

All Formtorch API requests require a Bearer token in the Authorization header.

Generating an API key

1. Sign in to app.formtorch.com 
2. Go to Settings → API Keys
3. Click Create new key
4. Give it a name and click Create
5. Copy the key. It’s only shown once.

Store the key in an environment variable. Never commit it to version control.

Using the API key

Include it as a Bearer token in the Authorization header:

curl https://api.formtorch.com/v1/forms \
  -H "Authorization: Bearer YOUR_API_KEY"

In JavaScript:

const res = await fetch("https://api.formtorch.com/v1/forms", {
  headers: {
    Authorization: `Bearer ${process.env.FORMTORCH_API_KEY}`,
  },
});

Key scopes

Keys generated from the dashboard have full access to your account’s forms and submissions. Scoped keys (read-only, per-project) are planned for a future release.

Revoking a key

Go to Settings → API Keys and click Revoke next to the key. Revoked keys stop working immediately.

Error responses