Search submissions across forms
Searches the 25 most recently active forms this key can read and returns the matches with the form each one came from.
Takes the same filters as a form’s own list. Matches come grouped by form, and the response carries complete: false when the search did not reach every form or every match; narrow it with form_ids, team_id or a date range.
For one form, use its own list, which pages through everything with a cursor.
curl --request GET \
--url https://api.formcarry.com/v1/submissions \
--header 'Authorization: Bearer <token>'import requests
url = "https://api.formcarry.com/v1/submissions"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://api.formcarry.com/v1/submissions', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.formcarry.com/v1/submissions",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.formcarry.com/v1/submissions"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("Authorization", "Bearer <token>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://api.formcarry.com/v1/submissions")
.header("Authorization", "Bearer <token>")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.formcarry.com/v1/submissions")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'
response = http.request(request)
puts response.read_body{
"data": [
{
"id": "64c000000000000000000001",
"form_id": "AbC123xyz",
"created_at": "2026-01-15T10:00:00.000Z",
"spam": true,
"read": true,
"ip": "<string>",
"country": "DE",
"user_agent": "<string>",
"referer": "<string>",
"fields": [
{
"key": "email",
"value": "ann@example.com"
}
],
"attachments": [
{
"key": "cv",
"url": "<string>",
"mime_type": "application/pdf"
}
]
}
],
"forms_searched": 12,
"forms_matched": 14,
"complete": true
}Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Query Parameters
Which submissions to include: the inbox (default), spam, or both.
inbox, spam, all Only submissions that have (true) or have not (false) been read in the dashboard.
true, false Only submissions with (true) or without (false) uploaded files.
true, false Only submissions created at or after this time (RFC 3339, or milliseconds since the epoch).
Only submissions created before this time (RFC 3339, or milliseconds since the epoch).
Only submissions sent from this country. Two-letter uppercase code. For several, separate them with commas. Max 20.
Only submissions where any field contains this text, matched literally and without case. 2 to 512 characters. On some forms a field that only appeared in very old submissions may be missed, so name that field with a field filter.
Newest first (the default) or oldest first.
newest, oldest Matches to return in total across every form searched. This search has no pages.
1 <= x <= 100Only return these submitted fields, separated by commas. Everything else about the submission still comes back.
Search this team only. Defaults to every team the key covers.
Search only these forms, separated by commas. Forms the key cannot read are left out whether or not you name them. Defaults to the 25 most recently active forms the key can read.
Response
Matches across the forms searched, each carrying its form_id.
Show child attributes
Show child attributes
How many of forms_matched were read before the search stopped.
12
Forms picked for the search: the ones the key can read that matched form_ids, at most 25.
14
False when the search did not reach every form or every match. Narrow it with form_ids, a date range or team_id.
Was this page helpful?
curl --request GET \
--url https://api.formcarry.com/v1/submissions \
--header 'Authorization: Bearer <token>'import requests
url = "https://api.formcarry.com/v1/submissions"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://api.formcarry.com/v1/submissions', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.formcarry.com/v1/submissions",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.formcarry.com/v1/submissions"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("Authorization", "Bearer <token>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://api.formcarry.com/v1/submissions")
.header("Authorization", "Bearer <token>")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.formcarry.com/v1/submissions")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'
response = http.request(request)
puts response.read_body{
"data": [
{
"id": "64c000000000000000000001",
"form_id": "AbC123xyz",
"created_at": "2026-01-15T10:00:00.000Z",
"spam": true,
"read": true,
"ip": "<string>",
"country": "DE",
"user_agent": "<string>",
"referer": "<string>",
"fields": [
{
"key": "email",
"value": "ann@example.com"
}
],
"attachments": [
{
"key": "cv",
"url": "<string>",
"mime_type": "application/pdf"
}
]
}
],
"forms_searched": 12,
"forms_matched": 14,
"complete": true
}