Menú

Referencia de la API · Web Forms

Respuestas

web_forms · submissions · 6 operaciones

GET/v1/web-forms/{form_id}/submissionsList the responses of a web form GET/v1/web-forms/{form_id}/submissions/{submission_id}Get one response of a web form DELETE/v1/web-forms/{form_id}/submissions/{submission_id}Delete one response of a web form POST/v1/web-forms/{form_id}/submissions/bulk/deleteDelete many responses of a web form POST/v1/web-forms/{form_id}/submissions/{submission_id}/resend-notificationRe-send the notification email of a response POST/v1/web-forms/{form_id}/submissions/{submission_id}/record-testRecord a test of the form made through the public endpoint

GET/v1/web-forms/{form_id}/submissions

List the responses of a web form

web_forms.submissions.list

LecturaIdempotenteDesde 2026-11-01

Lists the responses a web form received, newest first, paginated by cursor (limit up to 200). Without status it returns the real responses (success, and email_failed: stored but the notification email failed); status=rejected returns what the spam filters dropped (stored without its values), status=all everything. since (epoch ms) keeps only responses received at or after that time, for incremental syncs. Each response carries payload (field name → value, exactly as submitted), the notification result, the CRM lead it created (lead_id, lead_type, person_id) and the ad attribution captured by the MB Suite pixel; the browser (user_agent) comes with web_forms.submissions.get. The visitor's IP is never stored in clear and its hash is not returned. Not found if the form does not exist. Requires view access to Web Forms.

Alcance: web_forms:read
Permiso: Ver el módulo
Tool del MCP: web_forms_submissions_listEn la superficie completa; en la compacta, mb_execute_operation con id: "web_forms.submissions.list".

Costo declarado: hasta 203 lecturas y 0 escrituras por llamada (cuentan en el cupo diario).

Parámetros

form_idstringrutarequerido

The form's id (from web_forms.forms.list, or the form_id that web_forms.forms.create returns).

limitintegerqueryopcional

How many items this page brings at most (see the maximum and the default in the schema).

Por defecto: 50

cursorstringqueryopcional

The next_cursor of the previous page, exactly as it came (only for the same list and filters); without it, the first page.

statusenumqueryopcional

Omit for the real responses (success and email_failed); 'rejected' for what the spam filters dropped; 'all' for everything.

Valores: success, email_failed, rejected, all

sinceintegerqueryopcional

Only responses received at or after this time (epoch milliseconds).

Respuesta

dataarray<object>

has_moreboolean

next_cursorstring

Errores

web_form_not_found invalid_input unknown_field authentication_required scope_insufficient module_access_denied operation_not_found rate_limited quota_exceeded

Ejemplo

curl "https://api.mb-suite.com/v1/web-forms/{form_id}/submissions" \
  -H "Authorization: Bearer $MB_API_KEY"

Probar con tu API key de prueba

Con una API key de prueba el pedido va siempre a tu organización de práctica: datos de ejemplo que puedes reiniciar.

curl "https://api.mb-suite.com/v1/web-forms/{form_id}/submissions" \
  -H "Authorization: Bearer $MB_TEST_KEY"

GET/v1/web-forms/{form_id}/submissions/{submission_id}

Get one response of a web form

web_forms.submissions.get

LecturaIdempotenteDesde 2026-11-01

Returns one response of a web form: payload (field name → value), when and from which origin it arrived, its status (success, email_failed or rejected with rejection_reason), who got the notification email (notification_recipients, notification_routed_value), the auto-responder result, the CRM lead it created and its ad attribution. Not found (web_form_submission_not_found) if the response does not exist in that form. Requires view access to Web Forms.

Alcance: web_forms:read
Permiso: Ver el módulo
Tool del MCP: web_forms_submissions_getEn la superficie completa; en la compacta, mb_execute_operation con id: "web_forms.submissions.get".

Costo declarado: hasta 1 lecturas y 0 escrituras por llamada (cuentan en el cupo diario).

Parámetros

form_idstringrutarequerido

The form's id (from web_forms.forms.list, or the form_id that web_forms.forms.create returns).

submission_idstringrutarequerido

The response's id (from web_forms.submissions.list).

Respuesta

idstring

form_idstring

received_atnumber

originstring

payloadobject

statusenum

Valores: success, email_failed, rejected

email_sentboolean

lead_createdboolean

user_agentstring

rejection_reasonstring | null

email_message_idstring | null

email_errorstring | null

notification_recipientsarray<string>

notification_routed_valuestring | null

auto_responder_sentboolean

auto_responder_errorstring | null

auto_responder_skip_reasonstring | null

lead_idstring | null

lead_typeenum | null

Valores: deal, prospect

person_idstring | null

attributionobject | null

recaptcha_scorenumber

recaptcha_outcomestring

tested_byobject

Errores

invalid_input unknown_field authentication_required scope_insufficient module_access_denied operation_not_found rate_limited quota_exceeded

Ejemplo

curl "https://api.mb-suite.com/v1/web-forms/{form_id}/submissions/{submission_id}" \
  -H "Authorization: Bearer $MB_API_KEY"

Probar con tu API key de prueba

Con una API key de prueba el pedido va siempre a tu organización de práctica: datos de ejemplo que puedes reiniciar.

curl "https://api.mb-suite.com/v1/web-forms/{form_id}/submissions/{submission_id}" \
  -H "Authorization: Bearer $MB_TEST_KEY"

DELETE/v1/web-forms/{form_id}/submissions/{submission_id}

Delete one response of a web form

web_forms.submissions.delete

IrreversibleDesde 2026-11-01

Deletes one response of a web form for good and rolls back the form's counters (for example, to honor a data deletion request). It does NOT go to the trash and cannot be undone; the notification email already sent and any CRM lead it created are not touched (delete the lead in the CRM if needed). Outside the screen it requires a dry run and a confirm_token. Requires edit access to Web Forms and, for a credential, deletion enabled.

Pide confirmación: primero dry_run: true (vista previa y confirm_token, que vale 10 minutos y una sola vez), después el mismo cuerpo con confirm_token. En unas pocas, solo con ciertos datos: la descripción dice cuándo. Por qué y cómo: Vista previa y confirmación.

Alcance: web_forms:write y «Permitir eliminar» (web_forms:delete en OAuth)
Permiso: Editar en el módulo
Tool del MCP: web_forms_submissions_deleteEn la superficie completa; en la compacta, mb_execute_operation con id: "web_forms.submissions.delete".

Costo declarado: hasta 2 lecturas y 2 escrituras por llamada (cuentan en el cupo diario).

Parámetros

form_idstringrutarequerido

The form's id (from web_forms.forms.list, or the form_id that web_forms.forms.create returns).

submission_idstringrutarequerido

The response's id (from web_forms.submissions.list).

Respuesta

oktrue

Errores

web_form_submission_not_found delete_not_allowed confirmation_required invalid_input unknown_field authentication_required scope_insufficient crm_action_denied idempotency_key_reused rate_limited quota_exceeded

Ejemplo

curl -X DELETE "https://api.mb-suite.com/v1/web-forms/{form_id}/submissions/{submission_id}" \
  -H "Authorization: Bearer $MB_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "dry_run": true
}'

Probar con tu API key de prueba

Con una API key de prueba el pedido va siempre a tu organización de práctica: datos de ejemplo que puedes reiniciar.

curl -X DELETE "https://api.mb-suite.com/v1/web-forms/{form_id}/submissions/{submission_id}" \
  -H "Authorization: Bearer $MB_TEST_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "dry_run": true
}'

POST/v1/web-forms/{form_id}/submissions/bulk/delete

Delete many responses of a web form

web_forms.submissions.bulk.delete

IrreversibleMasiva · hasta 500Desde 2026-11-01

Deletes up to 500 responses of one web form for good (ids that do not exist are skipped) and rolls back the form's counters. They do NOT go to the trash and cannot be undone; notification emails already sent and CRM leads already created are not touched. Outside the screen it requires a dry run (which counts what exists) and a confirm_token. Returns how many were deleted. Requires edit access to Web Forms and, for a credential, deletion enabled.

Alcance: web_forms:write y «Permitir eliminar» (web_forms:delete en OAuth)
Permiso: Editar en el módulo
Tool del MCP: web_forms_submissions_bulk_deleteEn la superficie completa; en la compacta, mb_execute_operation con id: "web_forms.submissions.bulk.delete".

Costo declarado: hasta 502 lecturas y 501 escrituras por llamada (cuentan en el cupo diario).

Parámetros

form_idstringrutarequerido

The form's id (from web_forms.forms.list, or the form_id that web_forms.forms.create returns).

submission_idsarray<string>cuerporequerido

The responses' ids (1 to 500), from web_forms.submissions.list.

Respuesta

deletednumber

Errores

web_form_not_found delete_not_allowed confirmation_required invalid_input unknown_field authentication_required scope_insufficient crm_action_denied idempotency_key_reused rate_limited quota_exceeded

Ejemplo

curl -X POST "https://api.mb-suite.com/v1/web-forms/{form_id}/submissions/bulk/delete" \
  -H "Authorization: Bearer $MB_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "submission_ids": [
    "SUBMISSION_ID"
  ],
  "dry_run": true
}'

Probar con tu API key de prueba

Con una API key de prueba el pedido va siempre a tu organización de práctica: datos de ejemplo que puedes reiniciar.

curl -X POST "https://api.mb-suite.com/v1/web-forms/{form_id}/submissions/bulk/delete" \
  -H "Authorization: Bearer $MB_TEST_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "submission_ids": [
    "SUBMISSION_ID"
  ],
  "dry_run": true
}'

POST/v1/web-forms/{form_id}/submissions/{submission_id}/resend-notification

Re-send the notification email of a response

web_forms.submissions.resend_notification

EscrituraDesde 2026-11-01

Sends the notification email of one response again, with the form's current recipients and routing, through Amazon SES (for example after fixing to_emails when the first send failed). Updates the response's email status: a successful re-send marks an email_failed response as success. A rejected response cannot be re-sent (web_form_submission_rejected: it was stored without its values). Returns sent=false with the error instead of failing. Sends a real email. Outside the app it always runs in two steps: dry_run=true says to whom it goes (and, for a test submission, whether it creates a CRM lead and where the auto-reply goes) with the same checks and a confirm_token (10 minutes); then call it again with the confirm_token. Requires edit access to Web Forms.

Alcance: web_forms:write
Permiso: Editar en el módulo
Tool del MCP: web_forms_submissions_resend_notificationEn la superficie completa; en la compacta, mb_execute_operation con id: "web_forms.submissions.resend_notification".

Costo declarado: hasta 2 lecturas y 1 escrituras por llamada (cuentan en el cupo diario). Toca una plataforma externa (ses): cuenta en el cupo de operaciones externas.

Parámetros

form_idstringrutarequerido

The form's id (from web_forms.forms.list, or the form_id that web_forms.forms.create returns).

submission_idstringrutarequerido

The response's id (from web_forms.submissions.list).

Respuesta

sentboolean

message_idstring | null

errorstring | null

recipientsarray<string>

Errores

web_form_not_found confirmation_required external_rejected external_unavailable external_rate_limited external_outcome_unknown sandbox_external_unavailable invalid_input unknown_field authentication_required scope_insufficient crm_action_denied idempotency_key_reused rate_limited quota_exceeded

Ejemplo

curl -X POST "https://api.mb-suite.com/v1/web-forms/{form_id}/submissions/{submission_id}/resend-notification" \
  -H "Authorization: Bearer $MB_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "dry_run": true
}'

Probar con tu API key de prueba

Con una API key de prueba el pedido va siempre a tu organización de práctica: datos de ejemplo que puedes reiniciar. En la práctica esta operación no se simula (toca otra plataforma): responde 409 sandbox_external_unavailable.

POST/v1/web-forms/{form_id}/submissions/{submission_id}/record-test

Record a test of the form made through the public endpoint

web_forms.submissions.record_test

EscrituraIdempotenteDesde 2026-11-01

Records in the audit log a test of the form made through the public endpoint (POST https://mb-suite.com/api/v1/public/forms/submit from one of the form's allowed origins, which goes through the origin check, the rate limits, the honeypot and the CAPTCHA like any visitor) and marks the response with tested_by. Send the submission_id the endpoint returned (it returns one only when the response came in). The response must be of that form, must have come in through the endpoint (a test from the editor or web_forms.forms.test_submit, origin __test__, gives 409 web_form_submission_is_test; a rejected one, 409 web_form_submission_rejected) and must have been received in the last 15 minutes (409 web_form_submission_too_old). note (optional, one line) says what was tested. The audit entry (web_forms.test_submit) is under the person behind the credential, with submittedVia public_endpoint, the response's origin, whether the notification email went out (email_sent) and whether a CRM lead was created (lead_created). Recording the same response again changes nothing (changed false) and does not audit again. It sends nothing and creates nothing. 404 web_form_not_found or web_form_submission_not_found. Requires edit access to Web Forms.

Alcance: web_forms:write
Permiso: Editar en el módulo
Tool del MCP: web_forms_submissions_record_testEn la superficie completa; en la compacta, mb_execute_operation con id: "web_forms.submissions.record_test".

Costo declarado: hasta 2 lecturas y 1 escrituras por llamada (cuentan en el cupo diario).

Parámetros

form_idstringrutarequerido

The form's id (from web_forms.forms.list, or the form_id that web_forms.forms.create returns).

submission_idstringrutarequerido

The response's id (from web_forms.submissions.list).

notestringcuerpoopcional

What the test checked, in one line (up to 500 characters): it is stored on the response and in the audit entry.

Respuesta

form_idstring

submission_idstring

changedboolean

originstring

received_atnumber

email_sentboolean

lead_createdboolean

tested_byobject

Errores

web_form_not_found invalid_input unknown_field authentication_required scope_insufficient crm_action_denied idempotency_key_reused rate_limited quota_exceeded

Ejemplo

curl -X POST "https://api.mb-suite.com/v1/web-forms/{form_id}/submissions/{submission_id}/record-test" \
  -H "Authorization: Bearer $MB_API_KEY"

Probar con tu API key de prueba

Con una API key de prueba el pedido va siempre a tu organización de práctica: datos de ejemplo que puedes reiniciar.

curl -X POST "https://api.mb-suite.com/v1/web-forms/{form_id}/submissions/{submission_id}/record-test" \
  -H "Authorization: Bearer $MB_TEST_KEY"