Automette docs
API Reference

Revoke a signing secret

DELETE
/api/v1/dynamic_urls/{id}/secrets

Authorization

ApiKeyAuth
AuthorizationBearer <token>

API key from Settings → API Keys.

In: header

Path Parameters

id*string

Query Parameters

slot*integer

Response Body

curl -X DELETE "https://example.com/api/v1/dynamic_urls/string/secrets?slot=0"
Empty

Add a signing secret POST

A Dynamic URL holds up to five secrets and any unrevoked one verifies, so rotating is add, migrate, revoke — not a cutover that breaks live embeds. Check `last_used_at` on the old secret before revoking it: that is the only way to tell whether anything is still signing with it.

List forms GET

Returns your team's forms, newest first, cursor paginated. `fields` is omitted here — fetch a single form to see its questions.