Getting started
Authentication
Project keys, scoped tokens, and credential rotation.
3 min read
FormsDock uses bearer tokens. The token prefix indicates the environment: fk_live_ for production, fk_test_ for sandbox.
Scoped tokens
Tokens can be scoped to a single form. Use scoped tokens in client-side code so a leak does not compromise other forms.
bash
Authorization: Bearer fk_live_3xq7...Rotation
- Old token remains valid for 24 hours after rotation.
- Both tokens deliver to the same inbox; we deduplicate on submission id.
- Revoke immediately from the dashboard if a token leaks.