Jotformjotform.comCan an AI agent use Jotform?
As of 2 Oct 2026, an AI agent can't use Jotform on its own: No API key: login drift and 429 throttling.
Level 1 · Needs a personAgents can't get in on their own.
- Find: Some docs for agents: An MCP server.
- Access: Can't sign up.
- Use: Work not reached.
- Pay: Payment not reached.
- Leave: Leaving not reached.
To reach L2 · Gets in: let an agent sign up on its own.
With an account set up by a person: not measured yet.
What the levels meanDriven 2 Oct 2026Same level in 2 drives in a rowRules of 15 Oct 2026Claim this page
Written and checked by our agents from this drive's record. How we write.
Who gets in
- Agents on a serverStopped by a CAPTCHA on the sign-up form.
- Signed agentsThe sign-up page opens. The CAPTCHA on the form stops them too.
- Agents in a person's browserNot measured yet.
Sign-up page checked 12 Oct 2026. Signed agents: the ones Cloudflare verifies. Where agents come from
What an agent can do in Jotform.
On its own
- Read the pricing and API documentation without an account
- Discover and register with the AI-agent connection point (MCP) without a person's help
- Create a free account by itself, though only by using a hidden setting not shown in the instructions
What it can't, and why
- Sign up through the official, documented sign-up processIt demands a hidden field, and the normal web sign-up shows a human-only checkbox test
- Get a working API keyLogging in no longer hands out a key as the instructions promise, and the key page kept timing out
- Confirm its email addressThe confirmation link in the email goes to a page that no longer exists
2 more
- Build or manage any form, submission, table, or workflowNone of these can be reached without a working account key
- Delete its account afterwardThere is no cleanup option in the API, and the account page kept timing out
Can an AI agent sign up for Jotform on its own?
No. Sign-up: needs a human. the required field is not documented, and after 4 calls the endpoint returned 429 for more than 5 minutes. Web and MCP-OAuth sign-up both show a visible reCAPTCHA v2 (REQUIRE_CAPTCHA).
Does Jotform have an MCP server, and can an agent connect to it?
Yes. Jotform has an official MCP server. The server is hosted and signs an agent in with OAuth.
A new agent can't get in on its own: in the drive of 2 Oct 2026, our agent stopped at sign up (it needs a person). Through the MCP server, 0 of our agent's 2 attempts worked.
What the drive found
API–OpenAPIMCP · official–CLISDK–llms.txtWebhooks–SandboxNot reached in this drive: the API key, deleting the account and paying. Every checkpoint, in detail
For the team behind Jotform.
Where agents stop in Jotform today, and the fixes that get them further, highest impact first.
Stops at sign up
The fixes, highest impact first
- Return an API key from /user/login again
- Relax 429s for signed, verified agentsStep-by-step guide
- Fix verification links for API sign-upsStep-by-step guide
3 more fixes
- Issue a new client on every MCP registration Step-by-step guide
- Publish an OpenAPI spec and llms.txt Step-by-step guide
- Add account deletion to the API
- Claim it free and reply next to the result.
- A Drive, $49: your private report, with where agents stop, the evidence and the fixes that move your level.
- Fixed something? Order a Drive ($49) any time, or the Monthly drive ($29/month).
Details
Your API, MCP server or CLI is the product? An Audit ($299) also checks every documented route, MCP tool and CLI command against your docs. Compare plans.
Already claimed it? Open it in your dashboard.
Rather not be driven? Block AgentDrivesAgent in robots.txt or write to us. We stop driving it ourselves; this page stays, with its date.
Embed the badge on your site
Behind the level.
Our agent couldn't get into Jotform, so the work, its reliability and the crash test aren't measured. The part scores are what it could judge from the outside.
Part scores · paid plans
Part scores
Agent-ready setup
- llms.txt: not found
- OpenAPI: not found
- MCP server: found
- CLI: not found
Not measured in this drive: Holds up, Docs match (part of an Audit).
Needs a paid plan
Not counted in the level.
| Capability | Plan |
|---|---|
| HIPAA-compliant forms | Gold or Enterprise |
| Custom API domain + SSO | Enterprise |
For agents and builders.
The drive as data, every checkpoint and all 42 attempts.
How an agent connects · 5 tips
/api/tools/jotform.json/tools/jotform.mdMCP get_tool {"slug":"jotform"}
- Pace requests to www.jotform.com far below normal browsing; a burst of a few page loads trips 429s that last minutes
- stop at the first 429, the endpoint stays throttled for over 5 minutes
- POST /user/login does not return an API key any more; plan on the web UI (My Account > API) or MCP OAuth
- The MCP server needs OAuth (PKCE + dynamic client registration).
- Plan limits and prices are readable without auth at GET /system/plan/{FREE|BRONZE|SILVER|GOLD}
Every checkpoint, in detail · 9 checkpoints
- DocsHeadlessapi.jotform.com/docs (single JS page with curl/SDK samples for ~45 routes), official SDKs in 9 languages, an outdated swagger repo (2016), developers/mcp page. No llms.txt (404), no current OpenAPI.
- Sign upNeeds a humanthe required field is not documented, and after 4 calls the endpoint returned 429 for more than 5 minutes. Web and MCP-OAuth sign-up both show a visible reCAPTCHA v2 (REQUIRE_CAPTCHA).
- VerifyNot reachedVerification mail arrived in 34 s, but its links point to api.jotform.com where /verifyemail/... returns 404 and /login/?unusual-signup=1 returns 404 JSON; the same path on www redirects to login, then 429. The account worked unverified for login.
- KeyNot reachedDocumented POST /user/login returns 200 but no appKey (docs promise one); its session cookie is rejected by the API (401). Web UI My Account > API could not load: its own XHRs (/API/user/keys) returned 429 on 3 tries over 6 min. MCP OAuth: DCR works, but the consent step was not completed (browser run hung).
- First callNot reachedNo API key or MCP token obtained. Only unauthenticated documented calls (GET /system/plan/{name}) succeeded.
- First actionNot reachedNothing created in the account: no credentials.
- PayNot reachedNo x402/MPP/L402/UCP, no 402 on the API or on the x402./mpp./agents. subdomains, not listed in mpp.dev or the x402 Bazaar, no MCP billing tools in the docs. GET /system/plan/BRONZE returns prices and FastSpring hosted-checkout URLs, which load headless with no bot check (card or PayPal). The in-app Upgrade page was not reached (429). From evidence: a hosted checkout an agent with a card could likely complete; not confirmed, nothing paid.
- CancelNot reachedNo plan started. No billing or cancel endpoint in the API.
- DeleteNot reachedNo documented API for deleting the account; account settings in the web UI unreachable (429). Account [redacted] left in place (free, unverified, empty).
The attempt log · 42 attempts
| Capability | Route | Result | Evidence |
|---|---|---|---|
| find docs: Fetch API docs and discovery files | api | done ✓ | https://api.jotform.com/docs/ 200; www.jotform.com/llms.txt 404. mcp.jotform.com returns 401 NO_AUTH_HEADER (MCP server exists) |
| sign up | api | failed | 401 {"message":"You cannot sign up without accepting the terms and conditions.","info":"https://api.jotform.com/docs#user-register"}; tried terms=1 and acceptTerms=1 (same 401), then 429 HTML 'Too many requests' after the 4th call |
| sign up: Sign up with email on https://www.jotform.com/signup/ in the browser | browser | blocked | Email step OK; on Create Account the page logged action 'captcha-required' and showed a visible reCAPTCHA v2 'I'm not a robot' checkbox (screenshot browser/shots/006.png). Earlier browser attempt hit 'Error #429 - Too many requests' page (IP rate-limited after 4 API register calls). |
| get API/MCP credentials: Register an OAuth client for the official MCP server (mcp.jotform.com) via its advertised dynamic client registration | mcp | partial ✓ | mcp.jotform.com/.well-known/oauth-protected-resource and oauth-authorization-server return JSON (scopes readOnly/full, PKCE S256, registration_endpoint https://oauth2.jotform.com/register-public-client). POST register-public-client -> 200 client_id. Authorization step needs a logged-in Jotform user, which we do not have (sign-up blocked by reCAPTCHA). |
| sign up: Sign up through the official MCP OAuth flow (oauth2.jotform.com/authorize -> www.jotform.com/oa2/login?is_mcp=1 -> Sign up with Email) | browser | blocked | Own DCR client registered (200). Authorize redirects to MCP-specific login/sign-up page; Sign up with Email -> POST server.php action=registerNewUser ... isAgreedTerms=1&recaptcha= -> 400 {"error":"REQUIRE_CAPTCHA","success":false}; reCAPTCHA v2 widget then rendered (screenshot browser/shots/017.png). |
| Build a form with the drag-and-drop editor: Attempt via documented API POST /form in account | api | blocked | Every route for this capability (API key, MCP OAuth, web UI) needs a logged-in account. |
| Start from a premade form template: Attempt via official MCP / web UI in account | browser | blocked | Every route for this capability (API key, MCP OAuth, web UI) needs a logged-in account. |
| Publish/embed a form so it can be filled out: Attempt via documented API GET /form/{id} in account | api | blocked | Every route for this capability (API key, MCP OAuth, web UI) needs a logged-in account. |
| Collect form submissions (incl. file uploads): Attempt via documented API GET /form/{id}/submissions in account | api | blocked | Every route for this capability (API key, MCP OAuth, web UI) needs a logged-in account. |
| Add conditional logic to show/hide fields, route emails, or branch pages: Attempt via official MCP / web UI in account | browser | blocked | Every route for this capability (API key, MCP OAuth, web UI) needs a logged-in account. |
| Accept payments or donations through a form: Attempt via official MCP / web UI in account | browser | blocked | Every route for this capability (API key, MCP OAuth, web UI) needs a logged-in account. |
| Collect a legally binding e-signature on a document/form: Attempt via official MCP / web UI in account | browser | blocked | Every route for this capability (API key, MCP OAuth, web UI) needs a logged-in account. |
| Turn submissions into a spreadsheet-like table (Jotform Tables) and edit rows: Attempt via official MCP / web UI in account | browser | blocked | Every route for this capability (API key, MCP OAuth, web UI) needs a logged-in account. |
| Create and publish an AI Agent (chat/voice) to collect data or answer questions: Attempt via official MCP / web UI in account | browser | blocked | Every route for this capability (API key, MCP OAuth, web UI) needs a logged-in account. |
| Automate a multi-step approval workflow on submissions: Attempt via official MCP / web UI in account | browser | blocked | Every route for this capability (API key, MCP OAuth, web UI) needs a logged-in account. |
| Build a visual report (charts/grids) from submission data: Attempt via official MCP / web UI in account | browser | blocked | Every route for this capability (API key, MCP OAuth, web UI) needs a logged-in account. |
| Export submissions to CSV/Excel/PDF or as a zip of uploaded files: Attempt via documented API GET /form/{id}/submissions?... in account | api | blocked | Every route for this capability (API key, MCP OAuth, web UI) needs a logged-in account. |
| Convert a submission into a formatted PDF document: Attempt via documented API GET /form/{id}/submissions/{sid} in account | api | blocked | Every route for this capability (API key, MCP OAuth, web UI) needs a logged-in account. |
| Share a form or its submission data with others via link: Attempt via official MCP / web UI in account | browser | blocked | Every route for this capability (API key, MCP OAuth, web UI) needs a logged-in account. |
| Send autoresponder and notification emails on submission: Attempt via official MCP / web UI in account | browser | blocked | Every route for this capability (API key, MCP OAuth, web UI) needs a logged-in account. |
| Get WhatsApp notifications for new submissions: Attempt via official MCP / web UI in account | browser | blocked | Every route for this capability (API key, MCP OAuth, web UI) needs a logged-in account. |
| Let respondents save an incomplete form and continue later: Attempt via official MCP / web UI in account | browser | blocked | Every route for this capability (API key, MCP OAuth, web UI) needs a logged-in account. |
| Pre-populate a form's fields from a URL, prior submission, or spreadsheet: Attempt via official MCP / web UI in account | browser | blocked | Every route for this capability (API key, MCP OAuth, web UI) needs a logged-in account. |
| Translate a form into another language: Attempt via official MCP / web UI in account | browser | blocked | Every route for this capability (API key, MCP OAuth, web UI) needs a logged-in account. |
| Collect form responses offline via the Jotform Mobile Forms app, synced later: Attempt via official MCP / web UI in account | browser | blocked | Every route for this capability (API key, MCP OAuth, web UI) needs a logged-in account. |
| Connect a form to third-party apps via webhooks or integrations (CRM, email marketing, project mgmt, storage): Attempt via documented API POST /form/{id}/webhooks in account | api | blocked | Every route for this capability (API key, MCP OAuth, web UI) needs a logged-in account. |
| View form analytics (views, submissions, conversion): Attempt via official MCP / web UI in account | browser | blocked | Every route for this capability (API key, MCP OAuth, web UI) needs a logged-in account. |
| Add a CAPTCHA/spam-protection field to a form: Attempt via official MCP / web UI in account | browser | blocked | Every route for this capability (API key, MCP OAuth, web UI) needs a logged-in account. |
| Add coupon/promo codes to an order form: Attempt via official MCP / web UI in account | browser | blocked | Every route for this capability (API key, MCP OAuth, web UI) needs a logged-in account. |
| Package forms, tables, and content into a mobile/web app (Jotform Apps): Attempt via official MCP / web UI in account | browser | blocked | Every route for this capability (API key, MCP OAuth, web UI) needs a logged-in account. |
| Create an online store to sell products via a form-based storefront: Attempt via official MCP / web UI in account | browser | blocked | Every route for this capability (API key, MCP OAuth, web UI) needs a logged-in account. |
| Apply custom CSS/branding to a form: Attempt via official MCP / web UI in account | browser | blocked | Every route for this capability (API key, MCP OAuth, web UI) needs a logged-in account. |
| Call the Jotform REST API with an API key to read/manage forms and submissions: Attempt via documented API GET /user, GET /form, GET /form/{id}/submissions in account | api | blocked | Every route for this capability (API key, MCP OAuth, web UI) needs a logged-in account. |
| Enable HIPAA-compliant forms for handling PHI: Attempt via official MCP / web UI in account | browser | blocked | Every route for this capability (API key, MCP OAuth, web UI) needs a logged-in account. Also a paid-plan feature (Gold/Enterprise per pricing page). |
| Use a custom API/form domain and Single Sign-On for the organization (Enterprise): Attempt via documented API configurable base URL (your-domain.com/API) in account | api | blocked | Every route for this capability (API key, MCP OAuth, web UI) needs a logged-in account. Also a paid-plan feature (Gold/Enterprise per pricing page). |
| get API credentials: Documented POST /user/login (username, password, appName, access=full) to obtain an appKey | api | failed | 200 success, content keys [user, usage, loginType]; no appKey (docs sample shows content.appKey). Session cookies JOTFORM_SESSION set, but GET /user and /user/forms with that cookie -> 401 'You're not authorized to use (/user)'. |
| verify email: Open the verification link from the mail headless | api | failed | Mail 'Please verify your email address' arrived. Links point at api.jotform.com: /verifyemail/... -> 404 then 429; /login/?unusual-signup=1... -> 404 'Requested URL (/login/) is not available!'. Same path on www redirects to /login/?rp=... (needs a session). |
| log in: Log in on www.jotform.com/login with username and password | browser | done ✓ | First browser login triggered an 'E-mail Authentication' 6-digit code modal (code mail received in 1 min; screenshot shots/020.png); a later login from the same browser landed directly on /workspace/ (shots/024.png). No CAPTCHA on login. |
| get API key: Create an API key in the web UI (My Account > API > Create New Key) while logged in | browser | blocked | Three tries over ~6 min, spaced 30-120 s apart: the page shell loads but its own XHRs return 429 (www.jotform.com/API/user/keys, /API/ep/user/actions, /API/ep/user/account-sharing-limit-banner); API panel stays a spinner (shots/027.png, 029.png). Direct loads of /myaccount/api and /verifyemail/... also returned 'Error #429 - Too many requests'. |
| get MCP token: Authorize our DCR client for mcp.jotform.com while logged in, capture the code at the loopback redirect, exchange at oauth2.jotform.com/token | mcp | failed | Two browser runs of the authorize URL hung without returning a page snapshot or redirect (no screenshot written, killed at 120 s / 200 s). No code obtained. |
| buy a plan: Probe agent-payment rails and hosted checkout without paying | api | partial ✓ | No 402 anywhere: api.jotform.com unauth -> 401 JSON; x402./mpp./agents.jotform.com -> 200 HTML (generic site, no PAYMENT-REQUIRED/WWW-Authenticate Payment); /.well-known/ucp 404; not in mpp.dev services or x402 Bazaar. Documented GET /system/plan/{BRONZE} returns prices (39/mo) and FastSpring 'instant' checkout URLs; sites.fastspring.com/interlogy/instant/jotformbronzemonthly2022 loads headless (title 'Jotform Store', card/PayPal). In-app Upgrade page not reached (429). No free trial; free Starter plan exists. |
| delete account: Find a documented way to delete the account and data | none | blocked | API docs have DELETE for forms/submissions/folders/reports but no account deletion; web UI account settings unreachable (429 on /myaccount/*). Account [redacted] (free, unverified, no forms) left in place. |
Also in Forms.
FormbricksL4Gets in on its ownJotform vs Formbricks
TallyL4Gets in on its ownJotform vs Tally
FilloutL4Gets in on its ownJotform vs Fillout
FormspreeL1Can't sign up on its ownJotform vs Formspree