Skode Forms

CRUD forms/fields, public submit, partial/resume, PDF + CSV/XLSX export, analytics. Authenticated with hashed, scoped, form-pinnable API keys.

Run code on submit for validation/transform/routing. An ad-hoc admin-only script runner exists; there is no way to bind it to submission.created.

Installable themes and custom field renderers. A versioned theme manifest type exists but its registry is not wired, so themes are first-party today.

HMAC-signed delivery with retry, backoff, SSRF-validated targets and a per-webhook delivery log — the best delivery machinery on the platform. The event vocabulary is currently two events: submission.created and lead.created.

Form is a Zapier OAuth provider with REST Hooks and dynamic field schema; consumes Calendly OAuth for scheduling.

Pixel providers (FB/Google/custom), the FormSpy capture script for non-Skode forms, and GDPR export/erasure endpoints.

Generate a form from a prompt; analyze + optimize submissions.

Forms/submissions exposed as MCP tools. No OAuth resource metadata yet, so remote agent connectors cannot authenticate.

Ship a new field type with its own renderer and validation. The built-in field types are a closed set today; the contributed-field-type seam is the flagship Forms extension point and is not yet open.