Authentication

All API requests require an API key passed in the request header.

API Key Format

API keys are prefixed with fk_ followed by 64 hexadecimal characters:

text

fk_a1b2c3d4e5f6...64 hex characters

Include your API key in the X-API-Key header on every request.

javascript

const response = await fetch('https://api.formfav.com/v1/form?...', {
  headers: {
    'X-API-Key': 'your_api_key_here'
  }
});

Every response includes rate limit information in the headers:

Header	Description
`X-RateLimit-Limit-Day`	Your daily request limit
`X-RateLimit-Remaining-Day`	Remaining requests today
`Retry-After`	Seconds until the next slot opens (only on 429 responses). See Rate Limiting.

Never expose API keys in client-side code, public repositories, or browser requests. Always make API calls from your server or backend.