Furrow Forms MCP server

What it does

Furrow Forms is a form backend that agents can set up end-to-end without human intervention. It handles form provisioning, spam filtering, webhook signing, and snippet generation for websites built by agents.

• An agent provisions forms for a newly built website and injects the form snippet with honeypot and timing fields into the codebase in a single call.
• Receive form submissions via HMAC-signed webhooks that are automatically retried across all pricing tiers.
• Configure spam handling, email routing, and Turnstile verification once at the project level and have those settings cascade to all forms on that project.

Tools this server exposes

Tool	Does
bootstrap_site	Provisions all forms for a site in a single idempotent call.
get_snippet	Retrieves the form snippet with honeypot and timing field protection ready to inject into code.
test_webhook	Tests webhook delivery and HMAC signature verification.
create_client	Creates a new client account.
get_client	Retrieves client details.
update_client	Updates client settings.
delete_client	Deletes a client account.
create_project	Creates a new project within a client.
get_project	Retrieves project details and inherited settings.
update_project	Updates project-level spam, email, and webhook settings.
delete_project	Deletes a project and its forms.
create_form	Creates a new form within a project.
get_form	Retrieves form configuration and settings.
update_form	Updates form-specific settings.
delete_form	Deletes a form.
list_submissions	Lists form submissions with filtering and pagination.
get_submission	Retrieves details of a single submission.
create_webhook	Registers a webhook endpoint for form submissions.
get_webhook	Retrieves webhook configuration.
update_webhook	Updates webhook URL and settings.
delete_webhook	Removes a webhook endpoint.
list_webhooks	Lists all webhooks for a project.
get_webhook_attempts	Retrieves delivery history and retry status for webhooks.

Before you enable it

An MCP server runs with whatever access you give it. Start with a development account rather than production, and check which tools the server exposes before you let an agent call them unattended.