Skip to main content

Authentication

Include your API key in the Authorization header:
Keep your API key secret. Do not expose it in client-side code or public repositories.

Base URL

Endpoints

Forms

List all forms
Get form submissions
Create form (title is required)

Contacts

List contacts (with optional filters: page, per_page, status, search, tag)
Get contact
Update contact
Add tag to contact
Remove tag from contact

Contact Tags

List contact tags
Create contact tag
Delete contact tag

Scheduling Pages

List scheduling pages
Get scheduling page
Create scheduling page (title is required)
Delete scheduling page

Meetings

List meetings (optional filters: status, since, until, scheduling_page_id, page, per_page)
Get meeting
Example response:
Update meeting (allowed fields: status, notes, cancellation_reason)
Delete meeting

Availability Schedules

List availability schedules
Get availability schedule

Sequences

Sequences have a separate API reference. See Sequences API for full documentation.

Rate Limits

API requests are rate limited per API key. Read endpoints allow 1,000 requests per minute; creation endpoints have their own hourly caps (for example, 100 form creations per hour). OAuth apps receive tiered limits based on their verification status. Exceeding a limit returns 429 Too Many Requests with a Retry-After header telling you when to try again.

Iframe Tracking Integration

Send tracking parameters from your page into OrbitForms forms for attribution and analytics.

How It Works

  1. Pass tracking fields to the form — Add comet_token as a query param on the form’s URL, or send any of the supported fields from your page into the embedded form via postMessage
  2. Orbit captures them — When a user submits, these values are stored with the submission
  3. Use in workflows — Reference them in workflows, webhooks, or exports for attribution reporting
Arbitrary URL parameters can also be captured with Hidden fields — set a hidden field’s value source to “URL parameter” and it will store that query param with every submission.

Supported Tracking Fields

Example (JavaScript, parent page of an iframe embed):
When embedding via iframe, the parent page can also pass these fields to the form with postMessage — see the Cometly iframe-tracking pattern linked in the Embed Script documentation. If you’re an analytics or attribution provider and want to integrate with OrbitForms, contact support for partnership options.

Next Steps

Webhooks

Receive real-time submission data

Integrations

Connect to CRMs and tools