Introduction

​

What is Formpaste?

Formpaste is a form backend: you paste a small snippet into your site (or hand an AI agent your access key), submissions land in your inbox, and spam is filtered out automatically. There’s no server to write and no forms API to integrate against. A form posts directly to POST /submit with an access_key field that identifies which form it belongs to. That’s the entire contract.

​

The 30-second promise

1. Create a form in the dashboard - you get an access_key (fp_…).
2. Paste a snippet (HTML, React, Next.js, Astro, Vue, or Svelte) into your site.
3. Submit the form. The submission is scored by spam heuristics and, if clean, emailed to your verified destination address. Suspicious submissions land in a quarantine folder instead of being silently dropped.

No API keys to provision server-side, no webhook to stand up before your first submission - nothing to embed on your site.

​

Spam filtering, by design

Formpaste never asks your visitors (or your agents) to solve a puzzle. Spam is caught with zero-cost heuristics instead - a honeypot field (botcheck), submission timing (_ts), link density, submission rate, and duplicate/disposable-email detection. Anything suspicious is quarantined, not dropped, so you can review it. See Spam filtering.

​

Two integration paths

Formpaste is built to be wired up by a person or by an AI coding agent — both use the same underlying contract.

​

Where to go next