Headless-native setup
Selected creators can create a backend-only form and endpoint without publishing a hosted form page.
Private preview
Your form backend, without a hosted form.
Post from your own website, app, or server. Makeform validates the request, stores the response, and runs the same inbox, notification, and integration workflows as other forms.
Owner access remains invite-only while the preview is bounded and measured.
Submit from your server
curl https://www.makeform.ai/api/headless/f/hf_… \
-H "Authorization: Bearer mfh_live_…" \
-H "Content-Type: application/json" \
-d '{"email":"ada@example.com"}'JSON and URL-encoded requests
Strict or learning loose schemas
No multipart or file uploads
Browser-safe access
Exact allowed origins, honeypot protection, optional Turnstile, and strict or loose validation.
Server authentication
Use a rotate-on-demand API key for servers, scripts, and mobile apps without exposing browser credentials.
Headless plan limits
These limits apply to Headless endpoints, not hosted form submissions.
Free
- 1 enabled endpoint
- 50 submissions/month
- Respondent auto-reply not included
Pro
- Unlimited enabled endpoints
- Unlimited Headless submissions
- Respondent auto-reply included
Business
- Unlimited enabled endpoints
- Unlimited Headless submissions
- Respondent auto-reply included
Current boundaries
- Multipart requests and file uploads are not supported.
- Browser origins match exactly, including scheme, hostname, and port.
- API keys are shown once. Rotate a key if it may have been exposed.
- The preview does not add a service-level agreement or a new pricing tier.