Forms
Forms overview
Three ways to collect submissions: hosted, custom HTML, or full API.
Create a form by defining its fields, then choose an integration style.
- Hosted — drop one tag; we render the form inside an isolated Shadow DOM and you inject your own CSS.
- Custom HTML — a complete, self-contained form you can restyle freely.
- API — build any UI you like and POST to the ingest endpoint.
<div data-devlune-form="YOUR_FORM_ID"></div> <script defer src="https://cdn.devlune.in/embed/forms.js"></script>
Tokens & origins
Every submission requires a short-lived, single-use HMAC token (5-minute TTL) minted at the edge, and is checked against your origin allowlist and rate-limited per IP. This blocks replay and cross-site abuse.