Bootstrap site
bootstrap_siteUse this to stand up a client, one website (project), and its forms in a single call. Before calling, ask the human who should receive notification emails (notify_emails has no default; empty means nobody is emailed), thank-you page vs on-page message, and whether to add Turnstile — see furrow://docs/workflow. name/slug are the client; optional project_name/project_slug default to the same. Free accounts cannot create a fourth active project — call create_upgrade_link if bootstrap_site returns plan_limit. Operator tokens (all workspaces) must pass team_id from list_teams. Team-scoped tokens may omit team_id and cannot target another workspace. Idempotent on client, project, and form slugs. Site settings (domains, Turnstile, notify emails, webhook, email templates, uploads) live on the project. Email templates support {{project.name}}, {{project.slug}}, {{form.name}}, {{form.slug}}, {{count}} (1-based clean submissions on this form, including the current one), and any submission field such as {{name}} or {{email}}. Use a fallback with {{name | "New submission"}}. Missing fields render empty and never error. Do not pass HTML; Furrow renders one owned layout. Plans are capacity, not a feature ladder. Free: one workspace, 100 clean submissions/month pooled on the team, 3 active (non-archived) projects, 30-day submission retention, and email.footer_mode / branding.mode stay furrow (other values return plan_limit). Yearly ($199/year): extra workspaces, 10,000 submissions/month, unlimited projects, 730-day retention, branding.mode furrow | off | agency. Expansion packs are $99/year each and add 5,000 submissions/month on a yearly account. MCP, webhooks, snippets, inheritance, Turnstile, and email templates stay available on free. Spam, honeypot, and rejected posts do not count. Use create_upgrade_link to hand a human a Stripe Checkout (or Customer Portal) URL. Pass product=expansion on a yearly team to add a pack. Checkbox groups, select multiple, and other multi-value HTML fields must use a [] suffix on the name (name="services[]") or only the last checked value is stored. Put services[] on field_contract.name too. JSON/fetch should send a real array without brackets ({ "services": ["a", "b"] }) and must not use Object.fromEntries(formData) — use formData.getAll("services"). Single checkbox, select, or combobox: no brackets. File inputs use multipart POST (name="resume[]" for multiple). Enable uploads on the project first. Downloads are the project inbox at files_url, with the form slug as a folder — never put that URL in a public snippet. Do not use when you only need to patch an existing form — call update_form.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Client (company) display name. | |
| slug | Yes | Lowercase hyphenated identifier, unique per team. Used for idempotent re-runs. | |
| No | Notification email template for the project: subject, from_name, intro, footer_mode, include_meta. | ||
| forms | No | Forms to create or update on the site, matched by slug. Re-running is safe. | |
| team_id | No | Team id from list_teams. Required for operator tokens and OAuth logins; team-scoped frw_ tokens may omit it. | |
| from_name | No | Legacy From display name. Prefer email.from_name. | |
| notify_cc | No | Cc'd on every notification email (max 10). Copies only: an email still needs at least one notify_emails address, and an address on more than one list is sent once (To, then Cc, then Bcc). Copies get [Potential spam] emails too. | |
| notify_bcc | No | Bcc'd on every notification email (max 10), hidden from the other recipients — use it when an agency wants a silent copy of a client's leads. Copies only: an email still needs at least one notify_emails address, and an address on more than one list is sent once (To, then Cc, then Bcc). Copies get [Potential spam] emails too. | |
| webhook_url | No | Public https endpoint that receives a signed JSON POST per clean submission. Null disables it. | |
| project_name | No | Website display name. Defaults to the client name. | |
| project_slug | No | Website slug. Defaults to the client slug. | |
| notify_emails | No | Addresses that receive each clean submission (max 10). Inherited by every form. Required unless webhook_url is set — ask the human which inbox should get submissions. | |
| notify_phones | No | E.164 numbers that get a short "new lead, check your email" text per clean submission (max 5). Inherited by every form. Never sent for spam. Text messages need the team's own Twilio account first (update_account sms). | |
| honeypot_field | No | Name of the hidden honeypot input the snippet emits. Defaults to _gotcha. | |
| webhook_secret | No | HMAC-SHA256 secret for the X-Furrow-Signature header. Omit to have one generated and returned. | |
| allowed_domains | No | Hostnames allowed to post to this project's forms (example.com, www.example.com). Empty accepts any origin. | |
| uploads_enabled | No | Accept multipart file fields on this project's forms. | |
| turnstile_secret | No | Cloudflare Turnstile secret used to verify tokens server-side. Null removes it. | |
| upload_max_files | No | Max files per submission (up to 20). | |
| rate_limit_per_ip | No | Max submissions per IP within rate_limit_window_s. | |
| require_turnstile | No | Reject submissions that lack a valid Turnstile token. | |
| turnstile_site_key | No | Cloudflare Turnstile site key for the frontend widget. Null removes it. | |
| rate_limit_window_s | No | Rate-limit window in seconds (max 86400). | |
| default_redirect_url | No | Where classic HTML posts redirect after success. Null returns JSON/inline success instead. | |
| upload_allowed_types | No | Allowed upload MIME types, e.g. application/pdf or image/*. | |
| upload_max_file_bytes | No | Max bytes per file (up to 25 MB). | |
| upload_max_total_bytes | No | Max total upload bytes per submission (up to 50 MB). |