Complete a submission
/submissions/{id}/actions/completeMoves a draft to completed: runs every field's validator, including required checks, and stamps the completion time. From completed it is a no-op that answers 200 and sends nothing. A failed check is 422 keyed answers.<field id>; a form that forbids completion is 409 invalid_state. Emits form.submitted and submission.updated; sends no email. It can't be undone through the API.
Path parameters
The submission's id, a uuid. An unknown id, or a submission you cannot see, returns 404.
Query parameters
Validate and run the call without committing it, returning what the real call would return with
meta.dry_runset.
Headers
Makes a retry safe. Send a new UUID for each new request and reuse it only to retry that request; the first response is replayed for 24 hours.
Responses
{
"data": {
"id": "7d8e9f01-2a3b-4c5d-9e6f-708192a3b4c5",
"form_id": "c3d4e5f6-0718-4293-a4b5-c6d7e8f90112",
"user_id": "6f1c2e8a-1b2c-4d5e-8f90-1a2b3c4d5e6f",
"status": "completed",
"started_at": "2026-06-15T10:30:00Z",
"completed_at": "2026-06-15T10:35:00Z",
"answers": {
"a1b2c3d4-e5f6-4071-8293-a4b5c6d7e8f9": "Ada Lovelace",
"b2c3d4e5-f607-4182-93a4-b5c6d7e8f901": 250000
},
"created_at": "2026-06-15T10:30:00Z",
"updated_at": "2026-06-15T10:35:00Z"
}
}Authorization failed. error.code is one of org_disabled,
ip_blocked, missing_scope, scope_disabled, user_disabled.
The request conflicts with existing state (error.code = conflict),
e.g. a compliance flow with the requested name already exists.
The request can't be processed (HTTP 422): validation_failed with one ErrorDetail per
problem, or a code documented on the operation.
Examples
curl -X POST https://your-org-domain/kong/core/api/v2/submissions/{id}/actions/complete\
-H "Authorization: Bearer $HELM_API_KEY"\
-H "Content-Type: application/json"