Authentication

API Key Authentication

All API requests (except the public submit endpoint) require authentication using an API key. Each form has its own unique API key that you can find in your dashboard.

How to Authenticate

You can pass your API key in two ways:

1. HTTP Header (Recommended)

Pass the API key in the x-api-key header:

curl -X GET \
  https://fastsubmit.hostspica.com/api/v1/forms \
  -H "x-api-key: fs_abc123xyz789..."

2. Query Parameter

Pass the API key as a query parameter (useful for quick testing):

curl -X GET \
  "https://fastsubmit.hostspica.com/api/v1/forms?apiKey=fs_abc123xyz789..."

Note: Using query parameters may expose your API key in server logs. Use headers for production.

Finding Your API Key

1. Log in to your FastSubmit dashboard
2. Navigate to Forms
3. Click on the form you want to access
4. Your API key is displayed on the form detail page

Regenerating Your API Key

If your API key is compromised, you can regenerate it:

1. Go to your form's settings page
2. Click Regenerate next to the API key
3. Confirm the action

Authentication Errors

Missing API Key (401)

{
  "error": "API key required. Pass via x-api-key header or apiKey query param"
}

Invalid API Key (403)

{
  "error": "Invalid API key"
}

Public vs Private Endpoints