Developers
Set your API contextPick a region and space ID once. Every sample fills in your base URL.
Where do I find these?

In Coevera: open your space's API application and choose Show Access. It shows the space ID and the base URL, whose host starts with your region.

From the API: if you know the space ID, the discovery endpoint GET /api/discovery/spaces/{space_id} returns its region and base URLs, without credentials.

Only the region and space ID are kept, in this browser. Never paste a key or password here.

More in the quickstart

REST APIOnline formsOnlineFormTypes

OnlineFormTypes

OnlineFormTypes: list, get, create, update and delete, plus batch operations.

The summaries on this page are generated from the specification; written descriptions come with the next releases of the reference.

MethodPathOperation
GET/entities/OnlineFormTypesList OnlineFormTypes
POST/entities/OnlineFormTypesCreate OnlineFormType
GET/entities/OnlineFormTypes/{id}Get OnlineFormType
PATCH/entities/OnlineFormTypes/{id}Update OnlineFormType
DEL/entities/OnlineFormTypes/{id}Delete OnlineFormType
POST/entities/OnlineFormTypes/batch-modifyCreate or update OnlineFormTypes in a batch
POST/entities/OnlineFormTypes/batch-deleteDelete OnlineFormTypes in a batch
POST/entities/OnlineFormTypes/batch-restoreRestore deleted OnlineFormTypes

GET List OnlineFormTypes

Returns the OnlineFormTypes the API application can read, one page at a time. In the list envelope, total counts every match and page_info pages through them.

Query parameters

NameTypeDescription
include-deletedbooleanInclude soft-deleted records. Lists only; get-by-id refuses it.
firstintegerPage size. Default 30, maximum 100; a larger value is refused with HTTP 400, code 117.
lastintegerReturn the last N records of the result; together with first, the last N of the first M. Maximum 100.
beforestringCursor from page_info.start_cursor, to page backwards. URL-encode it.
afterstringCursor from page_info.end_cursor of the previous page. URL-encode it: cursors are base64, and a raw + becomes a space.
expandstringRelated records to return inline instead of their URIs, comma-separated; dots reach nested relations, as in account_relations.account.
order-bystringFields to sort by, comma-separated. A leading - sorts descending, as in -modified; dotted paths sort by related fields.
filterobjectfilter[field]=value. Separate several values with a raw comma (OR), as in filter[name]=north,south. Encode a comma that belongs to a value as %2C. URLSearchParams and Python requests encode every comma, so build the filter part of the query string yourself. Dotted paths filter on related records, as in filter[owner.email]. Encode a + in a value as %2B: query values are form-decoded, so a raw + becomes a space.
filter-opobjectfilter-op[field]=operator, one per field: eq (the default), ieq, not-eq, not-ieq, contains, icontains, starts, istarts, ends, iends, gt, gte, lt, lte, between, null, not-null, empty and not-empty. null, not-null, empty and not-empty take no filter value; gt, gte, lt and lte take exactly one.
load-onlystringFields to return, comma-separated (raw or encoded commas both work here); dots select nested fields, as in owner.id. All fields are returned without it. Lists only: get-by-id refuses it with HTTP 400, code 118.

Responses

200 Page of OnlineFormType records.: success, total, page_info, data 400 Bad request 401 Not authenticated 429 Rate limited 500 Server error

GET /entities/OnlineFormTypes
curl 'https://{region}.api.coevera.com/api/v100/rest/spaces/{space_id}/entities/OnlineFormTypes?first=10&filter%5Bname%5D=north&filter-op%5Bname%5D=icontains' \
  --user "$COEVERA_API_KEY:$COEVERA_API_SECRET"
fetch('https://{region}.api.coevera.com/api/v100/rest/spaces/{space_id}/entities/OnlineFormTypes?first=10&filter%5Bname%5D=north&filter-op%5Bname%5D=icontains', {
  headers: {
    Authorization: "Basic " + btoa(`${process.env.COEVERA_API_KEY}:${process.env.COEVERA_API_SECRET}`)
  }
})
import os

import requests

response = requests.get(
    "https://{region}.api.coevera.com/api/v100/rest/spaces/{space_id}/entities/OnlineFormTypes",
    params={
      "first": "10",
      "filter[name]": "north",
      "filter-op[name]": "icontains"
    },
    auth=(os.environ["COEVERA_API_KEY"], os.environ["COEVERA_API_SECRET"])
)

POST Create OnlineFormType

Creates one record and answers 201 with it.

Query parameters

NameTypeDescription
validation-levelintegerBit mask that relaxes validation on this write. 0 (the default) validates everything. Bits: 2 skip unchanged fields, 4 skip admin-defined validations, 8 allow read-only fields, 16 skip relation checks, 32 skip value checks, 64 skip invalid recalculations, 128 skip step-checklist gates, 256 add conditional field requirements, 512 skip uniqueness checks. Add bits together (20 = 4 + 16); member names and comma lists such as 4,16 work too. A value with an internal-only bit is refused with HTTP 400, code 117.

Request body

The new record's fields. Relations are set by id. Schema createOnlineFormTypeInput; the fields are in OnlineFormType fields. Required: entity_type, form_edit, is_enabled, is_readonly, name, owner_id, style_id, custom_recaptcha.

Responses

201 The created OnlineFormType record.: success, data 400 Bad request 401 Not authenticated 422 Validation failed 429 Rate limited 500 Server error

POST /entities/OnlineFormTypes
curl 'https://{region}.api.coevera.com/api/v100/rest/spaces/{space_id}/entities/OnlineFormTypes' \
  --request POST \
  --user "$COEVERA_API_KEY:$COEVERA_API_SECRET" \
  --header 'Content-Type: application/json' \
  --data '{
  "entity_type": 1,
  "form_edit": {},
  "is_enabled": false,
  "is_readonly": false,
  "name": "Northwind online form type",
  "owner_id": "37000000-0000-4000-a000-000000000001",
  "style_id": "66000000-0000-4000-a000-000000000001",
  "custom_recaptcha": "Northwind custom recaptcha"
}'
fetch('https://{region}.api.coevera.com/api/v100/rest/spaces/{space_id}/entities/OnlineFormTypes', {
  method: 'POST',
  headers: {
    Authorization: "Basic " + btoa(`${process.env.COEVERA_API_KEY}:${process.env.COEVERA_API_SECRET}`),
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    entity_type: 1,
    form_edit: {},
    is_enabled: false,
    is_readonly: false,
    name: 'Northwind online form type',
    owner_id: '37000000-0000-4000-a000-000000000001',
    style_id: '66000000-0000-4000-a000-000000000001',
    custom_recaptcha: 'Northwind custom recaptcha'
  })
})
import os

import requests

response = requests.post(
    "https://{region}.api.coevera.com/api/v100/rest/spaces/{space_id}/entities/OnlineFormTypes",
    headers={
      "Content-Type": "application/json"
    },
    auth=(os.environ["COEVERA_API_KEY"], os.environ["COEVERA_API_SECRET"]),
    json={
      "entity_type": 1,
      "form_edit": {},
      "is_enabled": False,
      "is_readonly": False,
      "name": "Northwind online form type",
      "owner_id": "37000000-0000-4000-a000-000000000001",
      "style_id": "66000000-0000-4000-a000-000000000001",
      "custom_recaptcha": "Northwind custom recaptcha"
    }
)

GET Get OnlineFormType

Returns one record by id. expand returns related records inline instead of their URIs.

Path parameters

NameTypeDescription
idstring (uuid)Id of the OnlineFormType record to retrieve. Required

Query parameters

NameTypeDescription
expandstringRelated records to return inline instead of their URIs, comma-separated; dots reach nested relations. The only parameter this call accepts.

Responses

200 The OnlineFormType record.: success, data 400 Bad request 401 Not authenticated 404 Not found 429 Rate limited 500 Server error

GET /entities/OnlineFormTypes/{id}
curl 'https://{region}.api.coevera.com/api/v100/rest/spaces/{space_id}/entities/OnlineFormTypes/45000000-0000-4000-a000-000000000001?expand=owner' \
  --user "$COEVERA_API_KEY:$COEVERA_API_SECRET"
fetch('https://{region}.api.coevera.com/api/v100/rest/spaces/{space_id}/entities/OnlineFormTypes/45000000-0000-4000-a000-000000000001?expand=owner', {
  headers: {
    Authorization: "Basic " + btoa(`${process.env.COEVERA_API_KEY}:${process.env.COEVERA_API_SECRET}`)
  }
})
import os

import requests

response = requests.get(
    "https://{region}.api.coevera.com/api/v100/rest/spaces/{space_id}/entities/OnlineFormTypes/45000000-0000-4000-a000-000000000001",
    params={
      "expand": "owner"
    },
    auth=(os.environ["COEVERA_API_KEY"], os.environ["COEVERA_API_SECRET"])
)

PATCH Update OnlineFormType

Changes the fields you send and leaves the rest as they are; there is no PUT.

Path parameters

NameTypeDescription
idstring (uuid)Id of the OnlineFormType record to update. Required

Query parameters

NameTypeDescription
validation-levelintegerBit mask that relaxes validation on this write. 0 (the default) validates everything. Bits: 2 skip unchanged fields, 4 skip admin-defined validations, 8 allow read-only fields, 16 skip relation checks, 32 skip value checks, 64 skip invalid recalculations, 128 skip step-checklist gates, 256 add conditional field requirements, 512 skip uniqueness checks. Add bits together (20 = 4 + 16); member names and comma lists such as 4,16 work too. A value with an internal-only bit is refused with HTTP 400, code 117.

Request body

The fields to change. Schema updateOnlineFormTypeInput; the fields are in OnlineFormType fields.

Responses

200 The changed OnlineFormType record.: success, data 400 Bad request 401 Not authenticated 404 Not found 422 Validation failed 429 Rate limited 500 Server error

PATCH /entities/OnlineFormTypes/{id}
curl 'https://{region}.api.coevera.com/api/v100/rest/spaces/{space_id}/entities/OnlineFormTypes/45000000-0000-4000-a000-000000000001' \
  --request PATCH \
  --user "$COEVERA_API_KEY:$COEVERA_API_SECRET" \
  --header 'Content-Type: application/json' \
  --data '{
  "name": "Northwind online form type (renamed)"
}'
fetch('https://{region}.api.coevera.com/api/v100/rest/spaces/{space_id}/entities/OnlineFormTypes/45000000-0000-4000-a000-000000000001', {
  method: 'PATCH',
  headers: {
    Authorization: "Basic " + btoa(`${process.env.COEVERA_API_KEY}:${process.env.COEVERA_API_SECRET}`),
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    name: 'Northwind online form type (renamed)'
  })
})
import os

import requests

response = requests.patch(
    "https://{region}.api.coevera.com/api/v100/rest/spaces/{space_id}/entities/OnlineFormTypes/45000000-0000-4000-a000-000000000001",
    headers={
      "Content-Type": "application/json"
    },
    auth=(os.environ["COEVERA_API_KEY"], os.environ["COEVERA_API_SECRET"]),
    json={
      "name": "Northwind online form type (renamed)"
    }
)

DEL Delete OnlineFormType

Deletes one record and answers with its id.

Path parameters

NameTypeDescription
idstring (uuid)Id of the OnlineFormType record to delete. Required

Responses

200 Deletion confirmation.: success, data 400 Bad request 401 Not authenticated 404 Not found 429 Rate limited 500 Server error

DEL /entities/OnlineFormTypes/{id}
curl 'https://{region}.api.coevera.com/api/v100/rest/spaces/{space_id}/entities/OnlineFormTypes/45000000-0000-4000-a000-000000000001' \
  --request DELETE \
  --user "$COEVERA_API_KEY:$COEVERA_API_SECRET"
fetch('https://{region}.api.coevera.com/api/v100/rest/spaces/{space_id}/entities/OnlineFormTypes/45000000-0000-4000-a000-000000000001', {
  method: 'DELETE',
  headers: {
    Authorization: "Basic " + btoa(`${process.env.COEVERA_API_KEY}:${process.env.COEVERA_API_SECRET}`)
  }
})
import os

import requests

response = requests.delete(
    "https://{region}.api.coevera.com/api/v100/rest/spaces/{space_id}/entities/OnlineFormTypes/45000000-0000-4000-a000-000000000001",
    auth=(os.environ["COEVERA_API_KEY"], os.environ["COEVERA_API_SECRET"])
)

POST Create or update OnlineFormTypes in a batch

An item with an id updates that record; an item without one creates a record. By default one invalid item fails the whole call with HTTP 422 and nothing is written; with rollback-method=1 the response has an id or an error for each item, in input order.

Query parameters

NameTypeDescription
validation-levelintegerBit mask that relaxes validation on this write. 0 (the default) validates everything. Bits: 2 skip unchanged fields, 4 skip admin-defined validations, 8 allow read-only fields, 16 skip relation checks, 32 skip value checks, 64 skip invalid recalculations, 128 skip step-checklist gates, 256 add conditional field requirements, 512 skip uniqueness checks. Add bits together (20 = 4 + 16); member names and comma lists such as 4,16 work too. A value with an internal-only bit is refused with HTTP 400, code 117.
rollback-methodinteger0, the default: one failed item fails the whole batch (HTTP 422, or 404 for an unknown id) and nothing is written. 1: the valid items are written and the call answers 200 with success false and one result per item, an id or an error, in input order. Check every item.

Request body

A JSON array of records: an item with an id updates, an item without one creates. Schema batchOnlineFormTypeInput; the fields are in OnlineFormType fields. Required: entity_type, form_edit, is_enabled, is_readonly, name, owner_id, style_id, custom_recaptcha.

Responses

200 Result per item, in request order: the id of the created or updated record, or the error.: success, data 400 Bad request 401 Not authenticated 422 Validation failed 429 Rate limited 500 Server error

POST /entities/OnlineFormTypes/batch-modify
curl 'https://{region}.api.coevera.com/api/v100/rest/spaces/{space_id}/entities/OnlineFormTypes/batch-modify' \
  --request POST \
  --user "$COEVERA_API_KEY:$COEVERA_API_SECRET" \
  --header 'Content-Type: application/json' \
  --data '[
  {
    "entity_type": 1,
    "form_edit": {},
    "is_enabled": false,
    "is_readonly": false,
    "name": "Northwind online form type",
    "owner_id": "37000000-0000-4000-a000-000000000001",
    "style_id": "66000000-0000-4000-a000-000000000001",
    "custom_recaptcha": "Northwind custom recaptcha"
  },
  {
    "id": "45000000-0000-4000-a000-000000000001",
    "name": "Northwind online form type (renamed)"
  }
]'
fetch('https://{region}.api.coevera.com/api/v100/rest/spaces/{space_id}/entities/OnlineFormTypes/batch-modify', {
  method: 'POST',
  headers: {
    Authorization: "Basic " + btoa(`${process.env.COEVERA_API_KEY}:${process.env.COEVERA_API_SECRET}`),
    'Content-Type': 'application/json'
  },
  body: JSON.stringify([
    {
      entity_type: 1,
      form_edit: {},
      is_enabled: false,
      is_readonly: false,
      name: 'Northwind online form type',
      owner_id: '37000000-0000-4000-a000-000000000001',
      style_id: '66000000-0000-4000-a000-000000000001',
      custom_recaptcha: 'Northwind custom recaptcha'
    },
    {
      id: '45000000-0000-4000-a000-000000000001',
      name: 'Northwind online form type (renamed)'
    }
  ])
})
import os

import requests

response = requests.post(
    "https://{region}.api.coevera.com/api/v100/rest/spaces/{space_id}/entities/OnlineFormTypes/batch-modify",
    headers={
      "Content-Type": "application/json"
    },
    auth=(os.environ["COEVERA_API_KEY"], os.environ["COEVERA_API_SECRET"]),
    json=[
      {
        "entity_type": 1,
        "form_edit": {},
        "is_enabled": False,
        "is_readonly": False,
        "name": "Northwind online form type",
        "owner_id": "37000000-0000-4000-a000-000000000001",
        "style_id": "66000000-0000-4000-a000-000000000001",
        "custom_recaptcha": "Northwind custom recaptcha"
      },
      {
        "id": "45000000-0000-4000-a000-000000000001",
        "name": "Northwind online form type (renamed)"
      }
    ]
)

POST Delete OnlineFormTypes in a batch

Deletes the records whose ids are in the body, a JSON array. By default an unknown id fails the whole call with HTTP 404.

Query parameters

NameTypeDescription
rollback-methodinteger0, the default: one failed item fails the whole batch (HTTP 422, or 404 for an unknown id) and nothing is written. 1: the valid items are written and the call answers 200 with success false and one result per item, an id or an error, in input order. Check every item.

Request body

A JSON array of ids.

Responses

200 Result per id, in request order: the id of the deleted record, or the error.: success, data 400 Bad request 401 Not authenticated 404 Not found 422 Validation failed 429 Rate limited 500 Server error

POST /entities/OnlineFormTypes/batch-delete
curl 'https://{region}.api.coevera.com/api/v100/rest/spaces/{space_id}/entities/OnlineFormTypes/batch-delete' \
  --request POST \
  --user "$COEVERA_API_KEY:$COEVERA_API_SECRET" \
  --header 'Content-Type: application/json' \
  --data '[
  "45000000-0000-4000-a000-000000000001",
  "45000000-0000-4000-a000-000000000002"
]'
fetch('https://{region}.api.coevera.com/api/v100/rest/spaces/{space_id}/entities/OnlineFormTypes/batch-delete', {
  method: 'POST',
  headers: {
    Authorization: "Basic " + btoa(`${process.env.COEVERA_API_KEY}:${process.env.COEVERA_API_SECRET}`),
    'Content-Type': 'application/json'
  },
  body: JSON.stringify(['45000000-0000-4000-a000-000000000001', '45000000-0000-4000-a000-000000000002'])
})
import os

import requests

response = requests.post(
    "https://{region}.api.coevera.com/api/v100/rest/spaces/{space_id}/entities/OnlineFormTypes/batch-delete",
    headers={
      "Content-Type": "application/json"
    },
    auth=(os.environ["COEVERA_API_KEY"], os.environ["COEVERA_API_SECRET"]),
    json=[
      "45000000-0000-4000-a000-000000000001",
      "45000000-0000-4000-a000-000000000002"
    ]
)

POST Restore deleted OnlineFormTypes

Restores the deleted records whose ids are in the body, a JSON array.

Query parameters

NameTypeDescription
rollback-methodinteger0, the default: one failed item fails the whole batch (HTTP 422, or 404 for an unknown id) and nothing is written. 1: the valid items are written and the call answers 200 with success false and one result per item, an id or an error, in input order. Check every item.

Request body

A JSON array of ids.

Responses

200 Result per id, in request order: the id of the restored record, or the error.: success, data 400 Bad request 401 Not authenticated 404 Not found 422 Validation failed 429 Rate limited 500 Server error

POST /entities/OnlineFormTypes/batch-restore
curl 'https://{region}.api.coevera.com/api/v100/rest/spaces/{space_id}/entities/OnlineFormTypes/batch-restore' \
  --request POST \
  --user "$COEVERA_API_KEY:$COEVERA_API_SECRET" \
  --header 'Content-Type: application/json' \
  --data '[
  "45000000-0000-4000-a000-000000000001",
  "45000000-0000-4000-a000-000000000002"
]'
fetch('https://{region}.api.coevera.com/api/v100/rest/spaces/{space_id}/entities/OnlineFormTypes/batch-restore', {
  method: 'POST',
  headers: {
    Authorization: "Basic " + btoa(`${process.env.COEVERA_API_KEY}:${process.env.COEVERA_API_SECRET}`),
    'Content-Type': 'application/json'
  },
  body: JSON.stringify(['45000000-0000-4000-a000-000000000001', '45000000-0000-4000-a000-000000000002'])
})
import os

import requests

response = requests.post(
    "https://{region}.api.coevera.com/api/v100/rest/spaces/{space_id}/entities/OnlineFormTypes/batch-restore",
    headers={
      "Content-Type": "application/json"
    },
    auth=(os.environ["COEVERA_API_KEY"], os.environ["COEVERA_API_SECRET"]),
    json=[
      "45000000-0000-4000-a000-000000000001",
      "45000000-0000-4000-a000-000000000002"
    ]
)

OnlineFormType fields

FieldTypeNotes
iduuidRead-only Unique identifier of entity.
entity_typeintegerRequired on create Entity the form is built for: its fields can be placed on the form and each submission is linked to a record of this entity.1 Lead · 2 Account · 3 Contact · 4 Opportunity · 5 Task · 6 Appointment · 7 OpptyProductRelation · 8 Project · 9 Quote · 10 OnlineForm · 11 CustomEntity · 12 Product
form_editobjectRequired on create Definition of the form layout (fields, sections, settings) shown to respondents, as a JSON object conforming to the online-form layout schema.
is_enabledbooleanRequired on create When true, the form is published and accepts new submissions; when false, the form returns an error to respondents.
is_readonlybooleanRequired on create True when the form is system-managed and its schema cannot be edited by users.
namestringRequired on create Name of the entity and its default text representation.
owner_iduuid → ClientsRequired on create Id of the owning user.
style_iduuid → OnlineFormStylesRequired on create Id of the form style.
custom_recaptchabinaryRequired on createWrite-only Custom reCAPTCHA keys (site_key and secret_key) used on the forms of this type instead of the platform default; null switches back to the default.
auto_prefill_with_javascriptbooleanWhen true, the embedded form JavaScript pre-fills fields from URL query parameters on load.
descriptionstringFree-text description shown alongside the form definition in the UI.
entity_api_namestringAPI name of the custom entity the form targets.
last_schema_changedate-timeTimestamp of the most recent change to form_edit (form schema).
last_status_changedate-timeTimestamp of the most recent change to is_enabled.
notifications_statusobjectTracks which threshold-reached notifications have already been sent for the current form configuration.
Show all 30 fields
FieldTypeNotes
revisionintegerRevision when entity was lastly changed.
has_draftbooleanRead-only True when the record has unpublished draft changes, including pending translation changes, that can be published.
is_delete_protectedbooleanRead-only True when the record is protected against deletion because it must always exist in the space.
form_edit_apiobjectRead-only Typed, read-only view of the online form definition (form_edit): its fields, layout and settings.
can_change_readonlybooleanRead-only False for types whose read-only setting is fixed, such as the recurrent appointment type; true otherwise.
is_deletedbooleanRead-only Specifies if the entity is considered deleted.
modifieddate-timeRead-only Last modification time.
createddate-timeRead-only Creation time.
owneruri → ClientsRead-only User who owns the online form.
styleuri → OnlineFormStylesRead-only Visual style applied to the form when rendered.
activity_logsarray of uri → OnlineFormsRead-only Submissions (one per response) recorded for this form.
link_idstringRead-only Short identifier used in the public form URL (see link).
summarized_response_valuesintegerRead-only Sum of response values used to evaluate the response acceptance threshold (e.g.
linkstringRead-only Public URL for accessing the form (suitable for sharing with respondents).
has_custom_recaptchabooleanRead-only True when the form is configured with custom reCAPTCHA credentials; false when using the platform default reCAPTCHA setup.

Custom fields appear in your space's live spec: fetch it with your credentials.

Errors

Every error body has success: false, http_status, code, name and message. Branch on code: the status alone does not tell a missing permission from a bad parameter. All codes: error codes; how to handle them: Errors.

HTTPWhen
400Bad request: a bad or unknown parameter (codes 117, 118), a missing permission (code 50), conflicting data (code 2002) or any other API error. The REST API answers 400 where others answer 403 or 409; check code.
401Not authenticated: missing or wrong credentials, a credential of another space, or an expired token (code 401, ERROR_UNAUTHORIZED).
404No such record or entity (code 143 ERROR_NO_ENTITY, or 2006 ERROR_UNKNOWN_TYPE).
422Validation failed (code 40000, with the failing fields) or a required parameter is missing (code 119). By default one failed item fails a whole batch and nothing is written.
429Too many requests (code 182). Wait for the seconds in Retry-After, then retry.
500Unexpected server error (code 1000, ERROR_UNKNOWN).