Skip to content

BootFormForm backend for developers

Point a <form> at a BootForm endpoint and it just works — no backend code, no account required until you're ready to claim it.

BootForm

How it works

Drop this into any page — no account needed yet:

html
<form action="https://f.bootform.com/{your-form-id}" method="POST">
  <input name="email" type="email">
  <textarea name="message"></textarea>
  <button type="submit">Send</button>
</form>

Any form ID works the first time someone submits it. BootForm holds the submission until you claim the form — sign up (or log in), visit app.bootform.com/claim/{your-form-id}, and from then on it's a normal, owned form with a dashboard, notifications, and every setting below.

What you get

  • Spam protection — an invisible honeypot field on every form, plus optional Cloudflare Turnstile CAPTCHA (bring your own keys — BootForm never sits between you and Cloudflare).
  • Notifications — email and Discord, configured once per form. More channels are on the roadmap; the API already accepts them, delivery is what's still being built.
  • A real dashboard — search, filter, star, and archive submissions; per-form settings for allowed origins, timezone, redirect URLs, and field validation rules.
  • Workspaces — group forms and inherit shared defaults instead of configuring each one individually (Pro and above for more than one workspace).
  • An API and an MCP server — everything the dashboard can do, a REST API and an AI agent can do too. See the API reference or connect an agent below.

Built for AI agents

BootForm ships an MCP server so an AI coding agent — Claude Code or similar — can create and configure a form without you touching the dashboard:

bootform_create_form → bootform_get_snippet → bootform_add_email / bootform_add_discord

Connect at https://mcp.bootform.com/sse with an account API key. For an agent to understand BootForm without reading this page, there's also llms.txt (a short overview) and llms-full.txt (the complete API + MCP reference) — both written directly against the real API, not aspirational copy.