Get started

Fillout Forms for AI agents

Fillout is a form builder with an API for programmatic access to submissions, letting teams collect and manage form data. Connect it once through Arc0, and your agent, or Claude, ChatGPT and Cursor, can use it through one MCP endpoint, limited to what each user approved.

Connect Fillout FormsSee the 22 actions ↓
Forms and surveysAPI keyMCP + RESTfillout.com
AUDIT LOG · FILLOUT FORMSPOLICY: acme-support
09:41:07 · claude · u_8f2read
fillout_forms.list_records
List Records✓ allowed · 212ms
09:41:08 · claude · u_8f2read
fillout_forms.get_forms
Get forms✓ allowed · 164ms
09:41:09 · claude · u_8f2write
fillout_forms.create_field
Create field✓ approved · approved by user
09:41:12 · claude · u_8f2destructive
fillout_forms.delete_field
Delete field✕ blocked · policy: deny
EVERY FILLOUT FORMS CALL, ON THE RECORD
01 · USE CASES

What agents do in Fillout Forms.

01

Pull new form submissions

List records from a form's database to process new submissions since the last check.

02

Add a record to a table

Create a record in a connected table once a form submission needs to be logged elsewhere.

03

Confirm before deleting a table

Require approval before deleting a table, since it removes every submitted record in it.

02 · ACTIONS

22 Fillout Forms actions, graded by risk.

Every Fillout Forms action is tagged read, write or destructive, so one policy covers the whole app and new actions inherit the right default.

read

6

Look things up. Allowed by default.

  • fillout_forms.get_forms
    Get forms
  • fillout_forms.list_records
    List Records
  • fillout_forms.get_databases
    Get databases
  • fillout_forms.get_record_by_id
    Get record by ID
  • fillout_forms.get_database_by_id
    Get database by ID
  • fillout_forms.list_database_webhooks
    List database webhooks

write

10

Create and change things. Allow, or ask the user first.

  • fillout_forms.create_field
    Create field
  • fillout_forms.create_table
    Create table
  • fillout_forms.update_field
    Update field
  • fillout_forms.update_table
    Update table
  • fillout_forms.create_record
    Create record
  • fillout_forms.update_record
    Update record
  • fillout_forms.create_database
    Create Database
  • fillout_forms.create_database_webhook
    Create Database Webhook
  • fillout_forms.authorize_o_auth
    Authorize OAuth
  • fillout_forms.invalidate_access_token
    Invalidate Access Token

destructive

6

Delete, cancel or archive. Ask first, or deny outright.

  • fillout_forms.delete_field
    Delete field
  • fillout_forms.delete_table
    Delete table
  • fillout_forms.delete_record
    Delete record
  • fillout_forms.delete_database
    Delete database
  • fillout_forms.remove_form_webhook
    Remove form webhook
  • fillout_forms.delete_database_webhook
    Delete database webhook
03 · HOW IT WORKS

Fillout Forms in three steps.

  1. 01Your users connect Fillout FormsThey add their Fillout Forms api key on Arc0 Connect, under your brand. It goes straight into the vault.
  2. 02You set the rulesReads run, writes like “create field” can wait for the user, and “delete field” can be denied outright.
  3. 03Any agent can actYour agent calls Fillout Forms through the Arc0 SDK or MCP, and so can Claude, ChatGPT and Cursor. Every call lands on the audit log.
POLICY.TS
await arc0.policies.set('fillout_forms', {
  read: 'allow',
  write: 'ask',        // create_field
  destructive: 'deny',  // delete_field
})

# Claude Code: the same connection, one URL
$ claude mcp add --transport http arc0 \
    https://mcp.arc0.ai/u/u_8f2
04 · AUTH AND DATA

How Fillout Forms connects.

Users add their Fillout Forms api key on Arc0 Connect. It is encrypted in the vault, never shown to the model, and each user can rotate or revoke it at any time.

The same Fillout Forms connection serves your agent over MCP and your own backend over REST and the proxy, so a user connects once. How Arc0 handles credentials →

AUTH
API key
CREDENTIALS
Per-tenant encrypted vault
MODEL SEES
Results only, never credentials
AUDIT LOG
Every call, on every plan
05 · WORKS WITH

Use Fillout Forms from any agent.

Claude
ChatGPT
Cursor
Codex
VS Code
OpenAI Agents SDK
Claude Agent SDK
Vercel AI SDK
Mastra
LangGraph
06 · RELATED

More forms and surveys apps.

SafetyCulture255 actionsFormbricks45 actionsTypeform35 actionsSurveyMonkey22 actionsFormdesk20 actionsBasin19 actionsDatascope19 actionsFeathery19 actions
ALL FORMS AND SURVEYS APPS →
07 · FAQ

Fillout Forms and Arc0, answered.

Q01

Can I use Fillout Forms with Claude, ChatGPT or Cursor?

Yes. Connect Fillout Forms to Arc0 once, then add your Arc0 MCP URL to Claude, ChatGPT, Cursor, Claude Code or any other remote-MCP client. Each assistant only gets the Fillout Forms actions you allow.

Q02

How do users connect Fillout Forms?

Users add their Fillout Forms api key on Arc0 Connect. It is encrypted in the vault, never shown to the model, and each user can rotate or revoke it at any time.

Q03

Which Fillout Forms actions can my agent take?

22 in total: 6 read, 10 write and 6 destructive, such as “create field”. Your policies decide which of them each agent may call.

Q04

Can I stop my agent from deleting things in Fillout Forms?

Yes. Actions like “delete field” are graded destructive. Set destructive actions to deny, or to ask so the user approves each one, and blocked calls still show up on the audit log.

Q05

Can my own backend call Fillout Forms too?

Yes. The same Fillout Forms connection is available over REST and through the Arc0 proxy, so your product and your agent share one connection per user.

Get started

Plug Fillout Forms into your agent.

Your users connect Fillout Forms once, under your brand. Your agent gets 22 actions behind your policies, with every call on the record.

Connect Fillout FormsBrowse all apps →

Free to build · MCP + REST · Audit log on every plan