Formdesk

MARKETING · MARKETING

Forms, their input items, and form results in the account they connected.

Connect Formdesk with Fabriq Developer

Your user pastes their Formdesk credential on a page Agentic Fabriq hosts, so it never reaches your backend and never becomes one shared key across all of your users. Same call as OAuth, one more argument.

from af_sdk import AgenticFabriq

af = AgenticFabriq()                      # reads AF_APP_ID / AF_APP_SECRET

url = await af.initiate_connection(request, provider="formdesk", method="api_key")
return redirect(url)                      # an AF-hosted page, not yours

async with await af.for_user(request) as session:
    tools = await session.get_tools()     # only what this user granted

Provider names are surfaces, not vendors, and the authoritative list is the capabilities endpoint rather than any page including this one — an unknown name returns 400 with the valid list. Fabriq Developer is free to start and needs no provider paperwork. Start free or read the quickstart.

Connecting Formdesk in practice

Formdesk lists a "webservice API" and webhooks among its features but publishes no developer reference on the open web, so form and field identifiers, authentication and any throughput ceiling all have to come out of an account or out of support before an agent can be wired up.

Worth knowing

There is no public endpoint list or authentication description to read in advance; the features page names the webservice API and then routes technical questions to info@formdesk.com.
Webhooks are presented as the way to "directly submit entered data to one or more other systems", which suggests push-first integration and no documented polling contract to fall back on.

Checked against Formdesk features (2026-09-29)

Acts as the person, not as itself

Each user connects their own account. Every call carries both identities — the agent and the person it is acting for — so the agent can never reach past what that individual can already do.

Credentials never touch the agent

Tokens live in the vault and attach server-side at call time. The agent holds a session, not a secret, and revoking access does not mean rotating a key.

Every call on the record

Who asked, which agent acted, which action ran, and the verdict that let it through — one audit trail across every integration, not one per vendor.

What an agent can do

Each action is granted on its own. An agent allowed to read is not thereby allowed to write, and the scope beside each row is what the acting user must have connected for it to run at all.

formdesk_delete_by_domain_files_by_id_fileWRITE

Permanently deletes one file by file id. Costs 1 API credit.

api

formdesk_delete_by_domain_formresults_by_id_formresultWRITE

Deletes one result by entry id. The entry is still readable for 30 days with `_fd_deleted` set, but any file uploaded to it is lost immediately. Costs 1 API credit.

api

formdesk_delete_by_domain_formresults_by_id_formresult_filesWRITE

Deletes every file uploaded to one result by entry id. The files are gone; the result itself stays. Costs 1 API credit.

api

formdesk_delete_by_domain_forms_by_form_filesWRITE

Deletes every file uploaded to EVERY result of the form, in one call. Costs 1 API credit.

api

formdesk_delete_by_domain_users_by_id_userWRITE

Permanently deletes one Formdesk user by user id. Requires a key belonging to a SUPERVISOR. Costs 1 API credit.

api

formdesk_delete_by_domain_visitors_by_id_visitorWRITE

Permanently deletes one visitor by visitor id. Requires a key belonging to a SUPERVISOR. Costs 1 API credit.

api

formdesk_get_by_domain_filesREAD

Lists the account's files: those attached to result entries and those uploaded into the account, such as images used on forms and email attachments. Costs 1 API credit.

api

formdesk_get_by_domain_files_by_id_fileREAD

Returns the details of one file by file id -- not its content. Costs 1 API credit.

api

formdesk_get_by_domain_files_by_id_file_contentREAD

Downloads one file's content by file id. Formdesk answers with the BYTES; this tool returns the content type, the length, the filename from the content-disposition header and the content as base64 when it is within Agentic Fabriq's inline ceiling, and describes it without the bytes when it is larger. A file id comes from Get form result or from one of the file listings. Costs 1 API credit.

api

formdesk_get_by_domain_formresults_by_id_formresultREAD

Returns every answer and system field of one result by entry id. A deleted result is still returned for 30 days (with `_fd_deleted` set); files uploaded to a deleted entry are gone. Costs 1 API credit.

api

formdesk_get_by_domain_formresults_by_id_formresult_filesREAD

Lists the files uploaded to one result by entry id. Costs 1 API credit.

api

formdesk_get_by_domain_formresults_by_id_formresult_workflowREAD

Returns the workflow steps recorded against one result by entry id. Costs 1 API credit.

api

formdesk_get_by_domain_formsREAD

Lists the forms in the account folder. Costs 1 API credit.

api

formdesk_get_by_domain_forms_by_form_filesREAD

Lists the files uploaded to every result of the form. Costs 1 API credit.

api

formdesk_get_by_domain_forms_by_form_filtersREAD

Lists the names of the filters defined for the form; the definitions themselves are not returned. A name can be passed as `view` to the result listing and export tools. Costs 1 API credit.

api

formdesk_get_by_domain_forms_by_form_itemsREAD

Lists every item on the form that takes input and has an identifier, with its type (text, textarea, radiogroup, checkboxgroup, listbox, checkbox, userlist and so on). This is how to learn the field identifiers the result tools write to. Costs 1 API credit.

api

formdesk_get_by_domain_forms_by_form_resultsREAD

Lists the entry ids of the form's results, narrowed by the query parameters. Results already marked processed are not returned. Costs 1 API credit.

api

formdesk_get_by_domain_usersREAD

Lists the Formdesk user accounts in the folder. Costs 1 API credit.

api

formdesk_get_by_domain_users_by_id_userREAD

Returns every property of one user by Formdesk user id. Costs 1 API credit.

api

formdesk_get_by_domain_users_external_by_id_user_externalREAD

Returns every property of one user by the external id an identity provider knows them by, rather than by Formdesk's own id. Costs 1 API credit.

api

formdesk_get_by_domain_visitorsREAD

Lists the visitor accounts in the folder -- the logins that reach forms, as distinct from Formdesk users. Costs 1 API credit.

api

formdesk_get_by_domain_visitors_by_id_visitorREAD

Returns every property of one visitor by visitor id. Costs 1 API credit.

api

formdesk_get_by_domain_visitors_by_id_visitor_formresultsREAD

Lists the entry ids of every login-form result belonging to one visitor. Costs 1 API credit.

api

formdesk_get_by_domain_visitors_external_by_id_visitor_externalREAD

Returns every property of one visitor by the external id an identity provider knows them by. Costs 1 API credit.

api

formdesk_post_by_domain_formresults_by_id_formresult_pdfREAD

Renders one result as a PDF. Formdesk answers with the PDF BYTES; this tool returns the content type, the length, the filename from the content-disposition header and the PDF as base64 when it is within Agentic Fabriq's inline ceiling, and describes it without the bytes when it is larger. Costs 1 API credit.

api

formdesk_post_by_domain_forms_by_form_resultsWRITE

Adds one or more result entries to the form. The body is an ARRAY of entries, keyed by the form's own field identifiers (see List form items); a single entry may be sent as a bare object. At most 10 entries per call. A file is sent as `{"filename": ..., "content": "<base64>"}`. With several entries Formdesk always answers a success status and reports per-entry failures in an `errors` array. Costs 1 API credit per entry.

api

formdesk_post_by_domain_forms_by_form_results_exportREAD

Exports the form's results to a file in the requested format and answers with the export's download links (`files[]._links.content`). The query parameters narrow which entries are exported, exactly as on the result listing. COSTS ONE CREDIT PER COMPLETED FORM in the download, not one per call. Results already marked processed are not exported.

api

formdesk_post_by_domain_forms_by_form_signonWRITE

Returns a single sign-on link that opens the form for the named visitor without their username and password. Identify them by `username`, `email` or `id`. The link grants that visitor's access, so treat the answer as a credential. Costs 1 API credit.

api

formdesk_post_by_domain_parkWRITE

Parks form field values temporarily and returns a 32-character ticket. Passing that ticket to a form as `?ticket=<value>` pre-fills it, so no field values need to travel in the form's own URL. Costs 1 API credit.

api

formdesk_post_by_domain_signonWRITE

Returns a single sign-on link that signs the named Formdesk user in without their username and password. Identify them by `username`, `email` or `id`. Requires a key belonging to a SUPERVISOR. The link grants that user's access, so treat the answer as a credential. Costs 1 API credit.

api

formdesk_post_by_domain_usersWRITE

Creates a Formdesk user. Requires a key belonging to a SUPERVISOR. An ordinary user needs `name`, `email`, `username` and `password`; a user provisioned from an identity provider needs only `type` set to "external" plus `external_userid` and `external_provider`, and its other fields are filled from the provider's claims on first sign-in. Costs 1 API credit.

api

formdesk_post_by_domain_visitorsWRITE

Creates a visitor account. Requires a key belonging to a SUPERVISOR. An ordinary visitor needs `name`, `email` and `username`; a visitor provisioned from an identity provider needs only `type` set to "external" plus `external_userid` and `external_provider`. Costs 1 API credit.

api

formdesk_put_by_domain_formresults_by_id_formresultWRITE

Updates the answers of one result by entry id; the body is keyed by the form's own field identifiers. Costs 1 API credit.

api

formdesk_put_by_domain_formresults_by_id_formresult_incrementWRITE

Increments a numeric field of one result by entry id, locking the record so the resulting value is unique. Costs 1 API credit.

api

formdesk_put_by_domain_formresults_by_id_formresult_processedWRITE

Marks one result's synchronisation status as Processed (P). A processed result is then skipped by the result listing and the export, which is how a polling integration avoids reading the same entry twice. Costs 1 API credit.

api

formdesk_put_by_domain_users_by_id_userWRITE

Updates one user's properties by Formdesk user id. Requires a key belonging to a SUPERVISOR. The password cannot be changed here -- Formdesk's own update request carries no password field. Costs 1 API credit.

api

formdesk_put_by_domain_visitors_by_id_visitorWRITE

Updates one visitor's properties by visitor id. Requires a key belonging to a SUPERVISOR. Costs 1 API credit.

api