Update project
update_projectUse to patch website settings. Nested email sets notification templates: email.subject, email.from_name, email.intro, email.footer_mode (furrow | minimal | off), email.include_meta. Optional branding updates the team (mode furrow | off | agency on yearly only; other modes return plan_limit on free). Set uploads_enabled and upload_allowed_types here — forms inherit them. notify_cc and notify_bcc copy every notification email (Bcc stays hidden from the client — use it for an agency's quiet copy); forms inherit them. notify_phones (E.164) get a short new-lead text per clean submission once the team has Twilio set up (update_account sms); forms inherit them. Email templates support {{project.name}}, {{project.slug}}, {{form.name}}, {{form.slug}}, {{count}} (1-based clean submissions on this form, including the current one), and any submission field such as {{name}} or {{email}}. Use a fallback with {{name | "New submission"}}. Missing fields render empty and never error. Do not pass HTML; Furrow renders one owned layout. Plans are capacity, not a feature ladder. Free: one workspace, 100 clean submissions/month pooled on the team, 3 active (non-archived) projects, 30-day submission retention, and email.footer_mode / branding.mode stay furrow (other values return plan_limit). Yearly ($199/year): extra workspaces, 10,000 submissions/month, unlimited projects, 730-day retention, branding.mode furrow | off | agency. Expansion packs are $99/year each and add 5,000 submissions/month on a yearly account. MCP, webhooks, snippets, inheritance, Turnstile, and email templates stay available on free. Spam, honeypot, and rejected posts do not count. Use create_upgrade_link to hand a human a Stripe Checkout (or Customer Portal) URL. Pass product=expansion on a yearly team to add a pack. File inputs use multipart POST (name="resume[]" for multiple). Enable uploads on the project first. Downloads are the project inbox at files_url, with the form slug as a folder — never put that URL in a public snippet. Null Turnstile or webhook fields clear them. Do not use this to create forms. Updating project keys changes resolved settings on existing forms unless a form override is set.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| name | No | New project display name. | |
| No | Notification email template for the project: subject, from_name, intro, footer_mode, include_meta. | ||
| branding | No | Per-project branding override for notification emails and hosted pages. | |
| from_name | No | Legacy From display name. Prefer email.from_name. | |
| notify_cc | No | Cc'd on every notification email (max 10). Copies only: an email still needs at least one notify_emails address, and an address on more than one list is sent once (To, then Cc, then Bcc). Copies get [Potential spam] emails too. | |
| notify_bcc | No | Bcc'd on every notification email (max 10), hidden from the other recipients — use it when an agency wants a silent copy of a client's leads. Copies only: an email still needs at least one notify_emails address, and an address on more than one list is sent once (To, then Cc, then Bcc). Copies get [Potential spam] emails too. | |
| project_id | Yes | Project (website) id from list_projects, create_project, or bootstrap_site. | |
| webhook_url | No | Public https endpoint that receives a signed JSON POST per clean submission. Null disables it. | |
| notify_emails | No | Replace the notification recipients (max 10). Cannot be emptied while the project has no webhook_url. | |
| notify_phones | No | Replace the text-alert numbers (E.164, max 5). Empty array turns texts off. Text messages need the team's own Twilio account first (update_account sms). | |
| honeypot_field | No | Name of the hidden honeypot input the snippet emits. Defaults to _gotcha. | |
| webhook_secret | No | HMAC-SHA256 secret for the X-Furrow-Signature header. Omit to have one generated and returned. | |
| allowed_domains | No | Replace the allowed hostnames. Empty array accepts any origin. | |
| uploads_enabled | No | Accept multipart file fields on this project's forms. | |
| turnstile_secret | No | Cloudflare Turnstile secret used to verify tokens server-side. Null removes it. | |
| upload_max_files | No | Max files per submission (up to 20). | |
| rate_limit_per_ip | No | Max submissions per IP within rate_limit_window_s. | |
| require_turnstile | No | Reject submissions that lack a valid Turnstile token. | |
| turnstile_site_key | No | Cloudflare Turnstile site key for the frontend widget. Null removes it. | |
| rate_limit_window_s | No | Rate-limit window in seconds (max 86400). | |
| default_redirect_url | No | Where classic HTML posts redirect after success. Null returns JSON/inline success instead. | |
| upload_allowed_types | No | Allowed upload MIME types, e.g. application/pdf or image/*. | |
| upload_max_file_bytes | No | Max bytes per file (up to 25 MB). | |
| upload_max_total_bytes | No | Max total upload bytes per submission (up to 50 MB). |