Forms

Create a submission

POST/forms/{formId}/submissions
forms:writecreate_submission_legacyDeprecatedSunset 2027-06-30

Creates and immediately completes a submission for the token's user (the service user for an organisation token, which then cannot read it back); a user_id in the body is rejected, and it answers 201 without a Location. Only standard forms are accepted here (other types return 422 form_type_not_supported). Field validators are enforced; unknown field uuids return 422. Deprecated: withdrawn on 2027-06-30. POST /submissions replaces it; the Link header names it.

Path parameters

  • formIdstring (uuid)Required#

    The form's public uuid.

Request body

application/json, required

  • answersobjectRequired#

    Map of form field uuid -> answer value.

{
  "answers": {
    "a1b2c3d4-e5f6-4071-8293-a4b5c6d7e8f9": "Ada Lovelace",
    "b2c3d4e5-f607-4182-93a4-b5c6d7e8f901": 250000
  }
}

Responses

201

Created

FormSubmission
{
  "data": {
    "id": "7d8e9f01-2a3b-4c5d-9e6f-708192a3b4c5",
    "form_id": "c3d4e5f6-0718-4293-a4b5-c6d7e8f90112",
    "user_id": "6f1c2e8a-1b2c-4d5e-8f90-1a2b3c4d5e6f",
    "status": "completed",
    "started_at": "2026-06-15T10:30:00+00:00",
    "completed_at": "2026-06-15T10:30:00+00:00",
    "answers": {
      "a1b2c3d4-e5f6-4071-8293-a4b5c6d7e8f9": "Ada Lovelace",
      "b2c3d4e5-f607-4182-93a4-b5c6d7e8f901": 250000
    },
    "created_at": "2026-06-15T10:30:00+00:00",
    "updated_at": "2026-06-15T10:30:00+00:00"
  }
}
401

Authentication failed. error.code is one of invalid_token, expired, revoked.

Error
403

Authorization failed. error.code is one of org_disabled, ip_blocked, missing_scope, scope_disabled, user_disabled.

Error
404

Resource not found (error.code = not_found).

Error
422

Request validation failed (HTTP 422). The body is either the Laravel validation envelope (message + field-keyed errors) or the API error envelope for domain rejections (e.g. form_type_not_supported, folder_locked, parent_not_found, folder_not_empty).

429

Rate limit exceeded (error.code = rate_limited).

Error

Examples

curl -X POST https://your-org-domain/kong/core/api/v2/forms/{formId}/submissions\
  -H "Authorization: Bearer $HELM_API_KEY"\
  -H "Content-Type: application/json"\
  -d '{
  "answers": {
    "a1b2c3d4-e5f6-4071-8293-a4b5c6d7e8f9": "Ada Lovelace",
    "b2c3d4e5-f607-4182-93a4-b5c6d7e8f901": 250000
  }
}'