> ## Documentation Index
> Fetch the complete documentation index at: https://woku.app/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Submit a form response

> Records a response for the form. Answers are validated against the form definition before being stored; quarantined respondents are rejected with 429.



## OpenAPI

````yaml /openapi-v1.json post /v1/forms/{id}/responses
openapi: 3.0.0
info:
  title: Woku Client API v1
  description: >-
    Public REST API for programmatic management of woku Voice-of-Customer
    programs: trackers, VoC instruments (NPS, woku, CES, CSAT), action plans,
    support tickets, multi-channel sending and response capture. Requests are
    company-scoped by the API key; never send a company id.
  version: 1.0.0
  contact:
    name: Woku
    url: https://woku.app
    email: team@woku.app
servers:
  - url: https://clientapi.woku.app
    description: Production
security: []
tags: []
paths:
  /v1/forms/{id}/responses:
    post:
      tags:
        - v1 - forms
      summary: Submit a form response
      description: >-
        Records a response for the form. Answers are validated against the form
        definition before being stored; quarantined respondents are rejected
        with 429.
      operationId: V1FormsController_createFormResponse
      parameters:
        - name: id
          required: true
          in: path
          description: Form id
          schema:
            type: string
            format: ObjectId
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/V1CreateFormResponseBodyDto'
      responses:
        '201':
          description: Form response created
        '400':
          description: Validation error, or the form is closed
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ValidationErrorResponseDto'
        '403':
          description: Form does not belong to the caller company
        '404':
          description: Form not found or inactive
        '429':
          description: Respondent is quarantined
      security:
        - bearer: []
components:
  schemas:
    V1CreateFormResponseBodyDto:
      type: object
      properties:
        anonymous:
          type: boolean
          description: Whether this response is anonymous
          example: false
        email:
          type: string
          description: >-
            Email of the respondent (required when the form identifies clients
            by email and the response is not anonymous)
          example: respondent@example.com
        phone:
          type: string
          description: >-
            Phone of the respondent (required when the form identifies clients
            by phone and the response is not anonymous)
          example: '+56912345678'
        answers:
          type: object
          description: Answers keyed by field id
          additionalProperties: true
          example:
            field-uuid-1: John Doe
            field-uuid-2: 5
        responseChannel:
          type: string
          description: >-
            Inbound response channel. Defaults to 'api'; a value provided here
            REPLACES 'api' (user-defined channel). Stored on the response.
          example: my-crm
          maxLength: 48
        dispatchToken:
          type: string
          description: >-
            Opaque invitation dispatch token echoed from the link (?dtoken=).
            Consumed to mark the outbound invitation responded; never persisted.
          example: a1b2c3d4-...
          maxLength: 64
      required:
        - anonymous
        - answers
    ValidationErrorResponseDto:
      type: object
      properties:
        statusCode:
          type: number
          description: HTTP status code
          example: 400
        message:
          description: Array of validation error messages
          example:
            - email must be a valid email
            - password must be at least 8 characters
          type: array
          items:
            type: string
        error:
          type: string
          description: Error type
          example: Bad Request
      required:
        - statusCode
        - message
        - error
  securitySchemes:
    bearer:
      scheme: bearer
      bearerFormat: API key
      type: http
      description: Company secret API key.

````