Dokumentation API-Referenz Formulare & Site Studio form-builder 50 Endpunkte. Basis-URL: https://xapi.ambertech.cloud/api/v1
GET /form-builder/approvals/mineGET /form-builder/approvals/mine/historyGET /form-builder/assignments/mineGET /spaces/{spaceId} /formsPOST /spaces/{spaceId} /formsGET /spaces/{spaceId} /forms/{formId} PATCH /spaces/{spaceId} /forms/{formId} DELETE /spaces/{spaceId} /forms/{formId} GET /spaces/{spaceId} /forms/{formId} /analyticsGET /spaces/{spaceId} /forms/{formId} /approvalsGET /spaces/{spaceId} /forms/{formId} /approvals/historyGET /spaces/{spaceId} /forms/{formId} /assignmentsPOST /spaces/{spaceId} /forms/{formId} /assignmentsDELETE /spaces/{spaceId} /forms/{formId} /assignments/{assignmentId} POST /spaces/{spaceId} /forms/{formId} /duplicateGET /spaces/{spaceId} /forms/{formId} /integrationsPOST /spaces/{spaceId} /forms/{formId} /integrationsPATCH /spaces/{spaceId} /forms/{formId} /integrations/{integrationId} DELETE /spaces/{spaceId} /forms/{formId} /integrations/{integrationId} GET /spaces/{spaceId} /forms/{formId} /integrations/{integrationId} /deliveriesPOST /spaces/{spaceId} /forms/{formId} /integrations/{integrationId} /testPOST /spaces/{spaceId} /forms/{formId} /integrations/airtable/basesPOST /spaces/{spaceId} /forms/{formId} /integrations/airtable/tablesPOST /spaces/{spaceId} /forms/{formId} /integrations/clickup/listsPOST /spaces/{spaceId} /forms/{formId} /integrations/github/repositoriesPOST /spaces/{spaceId} /forms/{formId} /integrations/hubspot/propertiesPOST /spaces/{spaceId} /forms/{formId} /integrations/jira/issue-typesPOST /spaces/{spaceId} /forms/{formId} /integrations/jira/projectsPOST /spaces/{spaceId} /forms/{formId} /integrations/salesforce/fieldsPOST /spaces/{spaceId} /forms/{formId} /integrations/trello/listsPATCH /spaces/{spaceId} /forms/{formId} /public-linkPOST /spaces/{spaceId} /forms/{formId} /save-as-templateGET /spaces/{spaceId} /forms/{formId} /task-field-rolesPUT /spaces/{spaceId} /forms/{formId} /task-field-rolesGET /spaces/{spaceId} /forms/{formId} /webhooksPOST /spaces/{spaceId} /forms/{formId} /webhooksPATCH /spaces/{spaceId} /forms/{formId} /webhooks/{webhookId} DELETE /spaces/{spaceId} /forms/{formId} /webhooks/{webhookId} GET /spaces/{spaceId} /forms/{formId} /webhooks/{webhookId} /deliveriesPOST /spaces/{spaceId} /forms/{formId} /webhooks/{webhookId} /testGET /spaces/{spaceId} /forms/approvals/minePOST /spaces/{spaceId} /forms/approvals/steps/{stepId} /decideGET /spaces/{spaceId} /forms/assignments/mineGET /spaces/{spaceId} /forms/templatesPOST /spaces/{spaceId} /forms/templates/{templateId} /instantiatePOST /spaces/{spaceId} /forms/tools/recaptcha-key-checkGET /spaces/{spaceId} /payment-configPUT /spaces/{spaceId} /payment-configGET /spaces/{spaceId} /payment-config/stripe/productsPOST /spaces/{spaceId} /payment-config/stripe/productsGET /form-builder/approvals/mine TokenAntworten curl -X GET "https://xapi.ambertech.cloud/api/v1/form-builder/approvals/mine" \
-H "Authorization: Bearer $XISUITE_TOKEN"List the current user's decided approvals (history) across all spaces# GET /form-builder/approvals/mine/history TokenAntworten curl -X GET "https://xapi.ambertech.cloud/api/v1/form-builder/approvals/mine/history" \
-H "Authorization: Bearer $XISUITE_TOKEN"GET /form-builder/assignments/mine TokenAntworten curl -X GET "https://xapi.ambertech.cloud/api/v1/form-builder/assignments/mine" \
-H "Authorization: Bearer $XISUITE_TOKEN"GET /spaces/{spaceId} /forms TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– includeArchivedPflicht Query string–
Antworten curl -X GET "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms" \
-H "Authorization: Bearer $XISUITE_TOKEN"Create a new form (status=draft)# POST /spaces/{spaceId} /forms TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string–
Request-Bodyapplication/jsonCreateFormBuilderDto Name Typ Beschreibung namePflicht string– descriptionstring– iconstring– settingsobject– public_slugstring–
Antworten curl -X POST "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms" \
-H "Authorization: Bearer $XISUITE_TOKEN" \
-H "Content-Type: application/json" \
-d '{"name":"…"}'GET /spaces/{spaceId} /forms/{formId} TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– formIdPflicht Pfad string–
Antworten curl -X GET "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}" \
-H "Authorization: Bearer $XISUITE_TOKEN"PATCH /spaces/{spaceId} /forms/{formId} TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– formIdPflicht Pfad string–
Request-Bodyapplication/jsonUpdateFormBuilderDto Name Typ Beschreibung versionPflicht numberCurrent version for optimistic locking
namestring– descriptionobject– iconobject– statusstringWerte: draftpublisheddisabledarchived
settingsobject– public_slugobject–
Antworten curl -X PATCH "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}" \
-H "Authorization: Bearer $XISUITE_TOKEN" \
-H "Content-Type: application/json" \
-d '{"version":0}'DELETE /spaces/{spaceId} /forms/{formId} TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– formIdPflicht Pfad string–
Antworten curl -X DELETE "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}" \
-H "Authorization: Bearer $XISUITE_TOKEN"GET /spaces/{spaceId} /forms/{formId} /analytics TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– formIdPflicht Pfad string– fromPflicht Query string– toPflicht Query string–
Antworten curl -X GET "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}/analytics" \
-H "Authorization: Bearer $XISUITE_TOKEN"GET /spaces/{spaceId} /forms/{formId} /approvals TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– formIdPflicht Pfad string–
Antworten curl -X GET "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}/approvals" \
-H "Authorization: Bearer $XISUITE_TOKEN"Approval history (audit-log timeline) for a form# GET /spaces/{spaceId} /forms/{formId} /approvals/history TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– formIdPflicht Pfad string–
Antworten curl -X GET "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}/approvals/history" \
-H "Authorization: Bearer $XISUITE_TOKEN"GET /spaces/{spaceId} /forms/{formId} /assignments TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– formIdPflicht Pfad string–
Antworten curl -X GET "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}/assignments" \
-H "Authorization: Bearer $XISUITE_TOKEN"Assign a form to users and/or roles# POST /spaces/{spaceId} /forms/{formId} /assignments TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– formIdPflicht Pfad string–
Request-Bodyapplication/jsonAssignFormDto Name Typ Beschreibung userIdsstring[]public.users.id values
rolesstring[]Werte: owneradminmemberviewer
dueAtstringISO-8601 due date
Antworten curl -X POST "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}/assignments" \
-H "Authorization: Bearer $XISUITE_TOKEN" \
-H "Content-Type: application/json" \
-d '{"userIds":[],"roles":"owner","dueAt":"…"}'DELETE /spaces/{spaceId} /forms/{formId} /assignments/{assignmentId} TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– formIdPflicht Pfad string– assignmentIdPflicht Pfad string–
Antworten curl -X DELETE "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}/assignments/{assignmentId}" \
-H "Authorization: Bearer $XISUITE_TOKEN"Duplicate a form into a new draft# POST /spaces/{spaceId} /forms/{formId} /duplicate TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– formIdPflicht Pfad string–
Antworten curl -X POST "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}/duplicate" \
-H "Authorization: Bearer $XISUITE_TOKEN"GET /spaces/{spaceId} /forms/{formId} /integrations TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– formIdPflicht Pfad string–
Antworten curl -X GET "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}/integrations" \
-H "Authorization: Bearer $XISUITE_TOKEN"Create a native integration# POST /spaces/{spaceId} /forms/{formId} /integrations TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– formIdPflicht Pfad string–
Request-Bodyapplication/jsonCreateIntegrationDto Name Typ Beschreibung providerPflicht stringWerte: gmailgithubairtableclickuptrellojirahubspotsalesforce
configPflicht objectProvider config (Gmail: { fromEmail, fromName? })
fieldMapFieldMapEntry[]– fieldMap[].targetPflicht string– fieldMap[].sourcestring– fieldMap[].templatestring– credentialstringWrite-only; encrypted at rest and never returned.
isActiveboolean–
Antworten curl -X POST "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}/integrations" \
-H "Authorization: Bearer $XISUITE_TOKEN" \
-H "Content-Type: application/json" \
-d '{"provider":"gmail","config":{}}'PATCH /spaces/{spaceId} /forms/{formId} /integrations/{integrationId} TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– formIdPflicht Pfad string– integrationIdPflicht Pfad string–
Request-Bodyapplication/jsonUpdateIntegrationDto Name Typ Beschreibung configobjectProvider config (Gmail: { fromEmail, fromName? })
fieldMapFieldMapEntry[]– fieldMap[].targetPflicht string– fieldMap[].sourcestring– fieldMap[].templatestring– credentialstringWrite-only; encrypted at rest and never returned.
isActiveboolean–
Antworten curl -X PATCH "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}/integrations/{integrationId}" \
-H "Authorization: Bearer $XISUITE_TOKEN" \
-H "Content-Type: application/json" \
-d '{"config":{},"fieldMap":[],"credential":"…"}'DELETE /spaces/{spaceId} /forms/{formId} /integrations/{integrationId} TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– formIdPflicht Pfad string– integrationIdPflicht Pfad string–
Antworten curl -X DELETE "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}/integrations/{integrationId}" \
-H "Authorization: Bearer $XISUITE_TOKEN"GET /spaces/{spaceId} /forms/{formId} /integrations/{integrationId} /deliveries TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– formIdPflicht Pfad string– integrationIdPflicht Pfad string–
Antworten curl -X GET "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}/integrations/{integrationId}/deliveries" \
-H "Authorization: Bearer $XISUITE_TOKEN"Send a test event to a native integration# POST /spaces/{spaceId} /forms/{formId} /integrations/{integrationId} /test TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– formIdPflicht Pfad string– integrationIdPflicht Pfad string–
Antworten curl -X POST "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}/integrations/{integrationId}/test" \
-H "Authorization: Bearer $XISUITE_TOKEN"List the connected Airtable account’s bases# POST /spaces/{spaceId} /forms/{formId} /integrations/airtable/bases TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– formIdPflicht Pfad string–
Request-Bodyapplication/jsonListAirtableBasesDto Name Typ Beschreibung credentialstringAirtable Personal Access Token to list bases with. Omit to reuse the stored credential.
Antworten curl -X POST "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}/integrations/airtable/bases" \
-H "Authorization: Bearer $XISUITE_TOKEN" \
-H "Content-Type: application/json" \
-d '{"credential":"…"}'List the tables inside an Airtable base# POST /spaces/{spaceId} /forms/{formId} /integrations/airtable/tables TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– formIdPflicht Pfad string–
Request-Bodyapplication/jsonListAirtableTablesDto Name Typ Beschreibung baseIdPflicht stringAirtable base ID (e.g. appXXXXXXXXXXXXXX) to list tables for.
credentialstringAirtable Personal Access Token. Omit to reuse the stored credential.
Antworten curl -X POST "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}/integrations/airtable/tables" \
-H "Authorization: Bearer $XISUITE_TOKEN" \
-H "Content-Type: application/json" \
-d '{"baseId":"…"}'List the connected ClickUp account’s Lists# POST /spaces/{spaceId} /forms/{formId} /integrations/clickup/lists TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– formIdPflicht Pfad string–
Request-Bodyapplication/jsonListClickupListsDto Name Typ Beschreibung credentialstringClickUp personal token to list Lists with. Omit to reuse the stored credential.
Antworten curl -X POST "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}/integrations/clickup/lists" \
-H "Authorization: Bearer $XISUITE_TOKEN" \
-H "Content-Type: application/json" \
-d '{"credential":"…"}'List the connected GitHub account’s repositories# POST /spaces/{spaceId} /forms/{formId} /integrations/github/repositories TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– formIdPflicht Pfad string–
Request-Bodyapplication/jsonListGithubReposDto Name Typ Beschreibung credentialstringGitHub PAT; falls back to the stored token.
Antworten curl -X POST "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}/integrations/github/repositories" \
-H "Authorization: Bearer $XISUITE_TOKEN" \
-H "Content-Type: application/json" \
-d '{"credential":"…"}'List writable HubSpot contact properties# POST /spaces/{spaceId} /forms/{formId} /integrations/hubspot/properties TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– formIdPflicht Pfad string–
Request-Bodyapplication/jsonListHubspotPropertiesDto Name Typ Beschreibung credentialstringHubSpot Private App token to list contact properties with. Omit to reuse the stored credential.
Antworten curl -X POST "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}/integrations/hubspot/properties" \
-H "Authorization: Bearer $XISUITE_TOKEN" \
-H "Content-Type: application/json" \
-d '{"credential":"…"}'List the creatable issue types in a Jira project# POST /spaces/{spaceId} /forms/{formId} /integrations/jira/issue-types TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– formIdPflicht Pfad string–
Request-Bodyapplication/jsonListJiraIssueTypesDto Name Typ Beschreibung siteUrlPflicht stringAtlassian site, e.g. https://your-site.atlassian.net
emailPflicht stringAtlassian account email the API token belongs to.
projectKeyPflicht stringProject key to list creatable issue types for, e.g. ENG.
credentialstringAtlassian API token. Omit to reuse the stored credential.
Antworten curl -X POST "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}/integrations/jira/issue-types" \
-H "Authorization: Bearer $XISUITE_TOKEN" \
-H "Content-Type: application/json" \
-d '{"siteUrl":"…","email":"…","projectKey":"…"}'List the connected Jira account’s projects# POST /spaces/{spaceId} /forms/{formId} /integrations/jira/projects TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– formIdPflicht Pfad string–
Request-Bodyapplication/jsonListJiraProjectsDto Name Typ Beschreibung siteUrlPflicht stringAtlassian site, e.g. https://your-site.atlassian.net
emailPflicht stringAtlassian account email the API token belongs to.
credentialstringAtlassian API token. Omit to reuse the stored credential.
Antworten curl -X POST "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}/integrations/jira/projects" \
-H "Authorization: Bearer $XISUITE_TOKEN" \
-H "Content-Type: application/json" \
-d '{"siteUrl":"…","email":"…"}'List createable Salesforce Lead fields# POST /spaces/{spaceId} /forms/{formId} /integrations/salesforce/fields TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– formIdPflicht Pfad string–
Request-Bodyapplication/jsonListSalesforceFieldsDto Name Typ Beschreibung instanceUrlPflicht stringSalesforce instance URL, e.g. https://your-org.my.salesforce.com
Antworten curl -X POST "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}/integrations/salesforce/fields" \
-H "Authorization: Bearer $XISUITE_TOKEN" \
-H "Content-Type: application/json" \
-d '{"instanceUrl":"…"}'List the connected Trello account’s Lists# POST /spaces/{spaceId} /forms/{formId} /integrations/trello/lists TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– formIdPflicht Pfad string–
Request-Bodyapplication/jsonListTrelloListsDto Name Typ Beschreibung apiKeyPflicht stringTrello API key used to list the boards’ Lists.
credentialstringTrello token to list Lists with. Omit to reuse the stored credential.
Antworten curl -X POST "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}/integrations/trello/lists" \
-H "Authorization: Bearer $XISUITE_TOKEN" \
-H "Content-Type: application/json" \
-d '{"apiKey":"…"}'PATCH /spaces/{spaceId} /forms/{formId} /public-link TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– formIdPflicht Pfad string–
Request-Bodyapplication/jsonUpdateFormPublicLinkDto Keine Felder dokumentiert.
Antworten 409 Slug already taken or reserved curl -X PATCH "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}/public-link" \
-H "Authorization: Bearer $XISUITE_TOKEN" \
-H "Content-Type: application/json" \
-d '{}'Save a form as a reusable template# POST /spaces/{spaceId} /forms/{formId} /save-as-template TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– formIdPflicht Pfad string–
Antworten curl -X POST "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}/save-as-template" \
-H "Authorization: Bearer $XISUITE_TOKEN"GET /spaces/{spaceId} /forms/{formId} /task-field-roles TokenParameter Name Ort Typ Beschreibung formIdPflicht Pfad string–
Antworten curl -X GET "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}/task-field-roles" \
-H "Authorization: Bearer $XISUITE_TOKEN"PUT /spaces/{spaceId} /forms/{formId} /task-field-roles TokenParameter Name Ort Typ Beschreibung formIdPflicht Pfad string–
Request-Bodyapplication/jsonSyncTaskFieldRolesDto Name Typ Beschreibung space_idPflicht stringThe space where tasks will be created
mappingsPflicht objectMap of task field → form field_key (null to clear)
Antworten curl -X PUT "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}/task-field-roles" \
-H "Authorization: Bearer $XISUITE_TOKEN" \
-H "Content-Type: application/json" \
-d '{"space_id":"…","mappings":{}}'GET /spaces/{spaceId} /forms/{formId} /webhooks TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– formIdPflicht Pfad string–
Antworten curl -X GET "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}/webhooks" \
-H "Authorization: Bearer $XISUITE_TOKEN"Create an outbound webhook# POST /spaces/{spaceId} /forms/{formId} /webhooks TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– formIdPflicht Pfad string–
Request-Bodyapplication/jsonCreateWebhookDto Name Typ Beschreibung providerstringWerte: genericslackdiscordteamsgooglechatmattermostrocketchatzohocliqwebextelegramzapiermaken8npipedreamiftttpowerautomateairtablegooglesheets
Standard: "generic"
urlPflicht stringHTTPS endpoint that receives the POST
eventsstring[]Werte: submission.created
secretstringOptional HMAC signing secret (write-only)
isActivebooleanStandard: true
Antworten curl -X POST "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}/webhooks" \
-H "Authorization: Bearer $XISUITE_TOKEN" \
-H "Content-Type: application/json" \
-d '{"url":"…"}'PATCH /spaces/{spaceId} /forms/{formId} /webhooks/{webhookId} TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– formIdPflicht Pfad string– webhookIdPflicht Pfad string–
Request-Bodyapplication/jsonUpdateWebhookDto Name Typ Beschreibung providerstringWerte: genericslackdiscordteamsgooglechatmattermostrocketchatzohocliqwebextelegramzapiermaken8npipedreamiftttpowerautomateairtablegooglesheets
Standard: "generic"
urlstringHTTPS endpoint that receives the POST
eventsstring[]Werte: submission.created
secretstringOptional HMAC signing secret (write-only)
isActivebooleanStandard: true
Antworten curl -X PATCH "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}/webhooks/{webhookId}" \
-H "Authorization: Bearer $XISUITE_TOKEN" \
-H "Content-Type: application/json" \
-d '{"provider":"generic","url":"…","events":"submission.created"}'DELETE /spaces/{spaceId} /forms/{formId} /webhooks/{webhookId} TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– formIdPflicht Pfad string– webhookIdPflicht Pfad string–
Antworten curl -X DELETE "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}/webhooks/{webhookId}" \
-H "Authorization: Bearer $XISUITE_TOKEN"GET /spaces/{spaceId} /forms/{formId} /webhooks/{webhookId} /deliveries TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– formIdPflicht Pfad string– webhookIdPflicht Pfad string–
Antworten curl -X GET "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}/webhooks/{webhookId}/deliveries" \
-H "Authorization: Bearer $XISUITE_TOKEN"Send a test payload to a webhook# POST /spaces/{spaceId} /forms/{formId} /webhooks/{webhookId} /test TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– formIdPflicht Pfad string– webhookIdPflicht Pfad string–
Antworten curl -X POST "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/{formId}/webhooks/{webhookId}/test" \
-H "Authorization: Bearer $XISUITE_TOKEN"GET /spaces/{spaceId} /forms/approvals/mine TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string–
Antworten curl -X GET "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/approvals/mine" \
-H "Authorization: Bearer $XISUITE_TOKEN"Approve or reject an approval step# POST /spaces/{spaceId} /forms/approvals/steps/{stepId} /decide TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– stepIdPflicht Pfad string–
Request-Bodyapplication/jsonDecideApprovalDto Name Typ Beschreibung decisionPflicht stringWerte: approvedrejected
commentstringReviewer note (required on reject when the form enforces it)
Antworten curl -X POST "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/approvals/steps/{stepId}/decide" \
-H "Authorization: Bearer $XISUITE_TOKEN" \
-H "Content-Type: application/json" \
-d '{"decision":"approved"}'GET /spaces/{spaceId} /forms/assignments/mine TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string–
Antworten curl -X GET "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/assignments/mine" \
-H "Authorization: Bearer $XISUITE_TOKEN"GET /spaces/{spaceId} /forms/templates TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string–
Antworten curl -X GET "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/templates" \
-H "Authorization: Bearer $XISUITE_TOKEN"Create a new draft form from a template# POST /spaces/{spaceId} /forms/templates/{templateId} /instantiate TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string– templateIdPflicht Pfad string–
Antworten curl -X POST "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/templates/{templateId}/instantiate" \
-H "Authorization: Bearer $XISUITE_TOKEN"Check a reCAPTCHA key pair against Google (advisory)# POST /spaces/{spaceId} /forms/tools/recaptcha-key-check TokenRequest-Bodyapplication/jsonCheckRecaptchaKeysDto Name Typ Beschreibung site_keystringreCAPTCHA site key (public half).
secret_keystringreCAPTCHA secret key. Never logged or echoed back.
originstringOrigin the widget will run on, e.g. https://forms.example.com. Google validates the key against it, so without one every size check returns a false negative.
Antworten curl -X POST "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/forms/tools/recaptcha-key-check" \
-H "Authorization: Bearer $XISUITE_TOKEN" \
-H "Content-Type: application/json" \
-d '{"site_key":"…","secret_key":"…","origin":"…"}'Get the space’s Stripe connection (secrets redacted)# GET /spaces/{spaceId} /payment-config TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string–
Antworten curl -X GET "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/payment-config" \
-H "Authorization: Bearer $XISUITE_TOKEN"Connect / update the space’s Stripe credentials# PUT /spaces/{spaceId} /payment-config TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string–
Request-Bodyapplication/jsonSavePaymentConfigDto Name Typ Beschreibung publishableKeystringStripe publishable key (pk_...).
secretKeystringStripe secret key (sk_...). Write-only.
webhookSecretstringStripe webhook signing secret (whsec_...). Write-only.
isActivebooleanStandard: true
Antworten curl -X PUT "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/payment-config" \
-H "Authorization: Bearer $XISUITE_TOKEN" \
-H "Content-Type: application/json" \
-d '{"publishableKey":"…","secretKey":"…","webhookSecret":"…"}'List the connected Stripe account’s active products# GET /spaces/{spaceId} /payment-config/stripe/products TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string–
Antworten curl -X GET "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/payment-config/stripe/products" \
-H "Authorization: Bearer $XISUITE_TOKEN"Create a product + price in the connected Stripe account# POST /spaces/{spaceId} /payment-config/stripe/products TokenParameter Name Ort Typ Beschreibung spaceIdPflicht Pfad string–
Request-Bodyapplication/jsonCreateStripeProductDto Name Typ Beschreibung namePflicht string– pricePflicht numberPrice in major units (e.g. dollars).
currencyPflicht stringISO currency code, e.g. USD.
descriptionstring– imagestring–
Antworten curl -X POST "https://xapi.ambertech.cloud/api/v1/spaces/{spaceId}/payment-config/stripe/products" \
-H "Authorization: Bearer $XISUITE_TOKEN" \
-H "Content-Type: application/json" \
-d '{"name":"…","price":0,"currency":"…"}'Stand: 25. Oktober 2026 © 2026 XISUITE · AmberTech Solutions