
Ikiform
io.github.preetsuthar17Published by GitHub account preetsuthar17v0.1.0Updated Nov 8, 2026
Backend for any website form: create forms, read and triage submissions, debug webhooks.
Overview
Ikiform's hosted MCP server lets an assistant look up and create website forms, read and triage submissions, and debug webhooks.
- What you can do
- List forms and read a form's endpoint, fields and setup steps
- Create forms and change name, allowed domains or redirect URL
- List and read submissions, mark spam or not spam, and delete submissions
- List webhook endpoints and deliveries, send test events and replay failed deliveries
- Return setup steps for connecting a form through a connect_form prompt
- When to use it
- Useful when you are wiring an HTML, framework or server-side form to Ikiform and want the assistant to fetch form details, check incoming submissions for spam, or diagnose failing webhook deliveries without leaving the chat.
- Requirements
- Remote Streamable HTTP endpoint at ikiform.com/mcp. Requires a secret Ikiform API key (ik_sk_...) sent as an Authorization bearer header; the plugin reads it from the IKIFORM_API_KEY environment variable. The key is created in the Ikiform dashboard with scopes such as forms:read, forms:write, submissions:read, submissions:write, webhooks:read and webhooks:write. An Ikiform account is needed.
Installation
In SourceWeft
- Open Ikiform in the dashboard and add it to a workspace.
- Connect Authorization token credentials. They are stored privately and never shown on public pages.
- Enable the server for the chats that should use its tools.
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Use with an agent
Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.
Read https://sourceweft.com/mcp/io.github.preetsuthar17%2Fikiform/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.Other MCP clients
Add this to your client's mcpServers config.
{
"mcpServers": {
"ikiform": {
"type": "http",
"url": "https://ikiform.com/mcp",
"headers": {
"Authorization": "Bearer <YOUR_TOKEN>"
}
}
}
}README
Ikiform for Claude Code and other agents
Ikiform is the backend for any form. Point an HTML form, a framework form or a server request at https://ikiform.com/f/<formId>. Ikiform validates the post, blocks spam, stores it and sends signed webhooks.
This repository has two things:
- An Agent Skill (
ikiform) that teaches a coding agent to connect a form to Ikiform, post from a server, verify Ikiform webhooks and triage submissions. It works in Claude Code and any agent that readsSKILL.mdskills. - A Claude Code plugin that bundles the skill with the Ikiform MCP server, so the agent can look up your forms, create them, read submissions and debug webhooks.
Install in Claude Code
In a Claude Code session:
Or from your shell:
Set your API key
The plugin's MCP server reads your key from the IKIFORM_API_KEY environment variable.
-
Create a secret key at https://ikiform.com/dashboard/api-keys.
-
Give it the scopes you want the agent to have:
forms:readis enough to wire forms into your code. Add more only if you want the agent to do more. -
Export it in the shell you start Claude Code from, for example in
~/.zshrc: -
Start Claude Code and run
/mcp. The server shows asplugin:ikiform:ikiform.
The key is a secret. Keep it in your shell profile or a secrets manager, never in a repository or in browser code.
The skill works without the key. Without it, the agent asks you for the form id from the dashboard instead of looking it up.
Use it
Ask in plain words, for example:
- "Connect the contact form in this project to Ikiform."
- "Add a waitlist form to the landing page and send it to Ikiform."
- "Verify Ikiform webhooks in our Express server."
- "Show me this week's spam on the Contact form."
- "Why is my Ikiform webhook failing?"
Or run the skill directly with /ikiform:ikiform.
The agent asks before it deletes a submission or replays webhook deliveries.
Use the skill in other agents
The skill is a plain Agent Skills folder: plugins/ikiform/skills/ikiform/. Copy it into your agent's skills directory.
With the skills CLI, for Claude Code, Cursor, Codex and other agents:
Claude Code without the plugin:
Use .claude/skills/ikiform inside a project instead to share it with your team. For other agents, copy the same folder into the directory that agent reads skills from. The skill uses only name, description and license in its frontmatter, so it stays portable.
Connect the MCP server without the plugin
Server: https://ikiform.com/mcp, Streamable HTTP, authenticated with Authorization: Bearer ik_sk_....
Claude Code
Cursor
In ~/.cursor/mcp.json, or .cursor/mcp.json in a project:
VS Code
In .vscode/mcp.json. VS Code asks for the key the first time and stores it securely:
Tools
The full list of tools and the scope each one needs is at https://ikiform.com/docs/mcp#tools.
The server also has a connect_form prompt that returns setup steps for a form.
Layout
Check changes
With Claude Code installed:
Without it, or in CI, run the offline checks. They need Node 20 or later and no packages:
They check that every JSON file parses, that SKILL.md has a valid name and description under the Agent Skills limits, that its relative links resolve, and that the marketplace entry matches the plugin manifest.
To try a local copy before publishing:
Docs
- Ikiform docs: https://ikiform.com/docs
- Everything as markdown for agents: https://ikiform.com/llms.txt
- Support: [email protected]
License
MIT. See LICENSE.
Source: README.md at commit 299d645
Tools
0Version history
1- v0.1.0LatestNov 8, 2026
Score
85% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 daysRequired25 pts
- Auth declaredRequired10 pts
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts
