# Formgong
> Create contact forms, get HTML/React/Next.js snippets and read recent submissions on Formgong.
- name: com.formgong/mcp
- version: 1.0.1
- connection class: R0 (autonomous)
- trust: 100/100
- quality: 83/100 (good)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/com.formgong%2Fmcp
- tools: https://api.protogrid.dev/v1/servers/com.formgong%2Fmcp/tools
**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.
## Connection (mcpServers)
```json
{
"mcpServers": {
"formgong": {
"type": "http",
"url": "https://formgong.com/mcp",
"headers": {
"Authorization": "Bearer ${FORMGONG_TOKEN}"
}
}
}
}
```
Placeholders to fill: `${FORMGONG_TOKEN}`.
## Trust
- hygiene: 100
- liveness: 99
- freshness: 100
- provenance: 100
- drivers: +repository +namespace-matches-repo +dns-namespace +website +reachable +uptime-97% +updated-14d-ago
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.
## Quality 83/100 (good)
### protocol: 75 (weight 25)
- warn `protocol.modern`: newest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers
### authorization: n/a (weight 15)
- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL
### tool hygiene: 93 (weight 30)
- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 8 of 8 tools declare readOnlyHint or destructiveHint
- warn `tools.directory_hints`: 3 of 8 tools declare all four hints; missing: list_webhooks (destructiveHint); list_forms (destructiveHint); get_form_snippet (destructiveHint); …
- pass `tools.token_cost`: about 1,287 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump
### stability: 75 (weight 15)
- warn `stability.changes`: 8 tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name
### dependencies: n/a (weight 15)
- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package
- tools: 8, about 1,287 tokens to load them all
- tool set hash: 9da9f578aecf26f79b79f7b4e4358327
- tools last changed: 2026-10-17T06:11:23.492Z
- badge: [](https://protogrid.dev/servers/com.formgong/mcp)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.
### Tool changes
- 2026-10-17 `create_form` changed (inputSchema)
- 2026-10-09 `create_form` changed (inputSchema)
- 2026-10-09 `list_website_templates` changed (inputSchema)
- 2026-10-08 `list_website_templates` added
- List Formgong's free, MIT-licensed website templates (complete sites with a contact or quote form already wired to Formgong): name, niche, live demo, source, HTML download and a command to start from it. Starting from a template is much faster than generating a site from scratch. After choosing one, put the form's public access key (fk_…) where the template has fk_your_access_key.
- 2026-10-08 `delete_webhook` added
- Remove one webhook from a form. Submissions stop being sent to its URL.
- 2026-10-08 `create_webhook` added
- Add a public HTTPS URL to one form. Every new submission is then POSTed there as JSON with an X-Signature header (sha256=HMAC-SHA256 of the raw body, keyed with the form's signing key). Returns the webhook id and that signing key, so the receiver can verify each request.
- 2026-10-08 `list_webhooks` added
- Read-only: the webhook URLs of one form (id, url, created time).
- 2026-10-05 `create_form` changed (inputSchema)
Full history: https://api.protogrid.dev/v1/servers/com.formgong%2Fmcp/changes
## Remotes
- https://formgong.com/mcp (streamable-http, auth none, reachable true, uptime30d 0.9701493)
## Packages
_none_
## Tools (8)
- `create_form`: Create a new Formgong form. Submissions are emailed to the account email by default. Returns the form id and public access key. Telegram and extra email recipients are connected by the owner in the dashboard (links returned).
- `create_webhook`: Add a public HTTPS URL to one form. Every new submission is then POSTed there as JSON with an X-Signature header (sha256=HMAC-SHA256 of the raw body, keyed with the form's signing key). Returns the webhook id and that signing key, so the receiver can verify each request.
- `delete_webhook`: Remove one webhook from a form. Submissions stop being sent to its URL.
- `get_form_snippet`: Ready-to-paste contact form code for one form, with its access key, hidden _lang field, botcheck honeypot, and the Turnstile widget if the form has it enabled. html = plain