AI Agent Access

Use DevForms directly from your AI agent

This guide is for form owners who want to connect ChatGPT, Claude, Cursor, or other assistants to DevForms so they can manage forms and submissions for you.

Who this is for

This page is for people who already use DevForms and want to let an AI assistant do tasks like checking submissions, exporting CSV/JSON, creating forms, pausing forms, and reviewing analytics.

Quick start (5 minutes)

  1. Open your AI assistant and tell it to connect to your DevForms MCP endpoint: /mcp.
  2. When prompted, approve access using device authorization (you will get a URL and short code, then approve in browser).
  3. After approval, ask your assistant to run a simple action like list_forms.
  4. Once connected, move to higher-value tasks like exports, submission review, and form updates.

What your agent can do now

  • List forms in your account.
  • Create, pause, unpause, update, and delete forms.
  • Read submissions with filters (status/date range/pagination).
  • Export submissions in JSON or CSV.
  • Read per-form analytics and time-series data.

Example prompts you can copy

  • Show me all my DevForms forms and highlight paused ones.
  • Export submissions from form slug "contact" as CSV for the last 7 days.
  • Pause the form "beta-waitlist" and tell me how many submissions it has.
  • Create a new form called "Partner Leads" with slug "partner-leads".
  • Show analytics for "pricing-feedback" for range 1m.

Authentication flow your agent should use

DevForms supports a user-friendly device flow: your assistant gets a URL + code, you approve once in browser, and then it uses bearer tokens. No cookie copying is needed.

  • Start auth: POST /api/auth/device/authorize
  • User approval page: /agent/device
  • Exchange code for token: POST /api/auth/token with device grant
  • Call MCP tools using Authorization: Bearer ... against /mcp

Troubleshooting

  • If your assistant gets Unauthorized, it should restart device auth and ask you to approve again.
  • If a token exchange returns authorization_pending, wait and poll again after the server-provided interval.
  • If your agent can connect but returns no forms, confirm you are approving with the correct DevForms account.
  • Use Errors docs for API-level issues and status/code meanings.

For advanced builders (optional)

If you are building custom agent tooling, DevForms still exposes full discovery metadata and machine-readable docs:

  • /.well-known/agent-configuration
  • /.well-known/openid-configuration
  • /.well-known/oauth-authorization-server
  • /.well-known/oauth-protected-resource
  • /.well-known/mcp/server-card.json
  • /.well-known/agent-skills/index.json