Every API token holds a list of abilities. Each endpoint in the REST API and each tool in the MCP server lists the ability it requires. The token's abilities are the upper bound - a request without the right ability is rejected with 403 before any logic runs.
The REST API and MCP server share this permission model. A token that can call GET /api/v1/forms with forms:read can also call the MCP form-reading tools; without that ability both surfaces reject the request before touching form data.
Abilities are independent of plan
Token abilities are independent of plan. A token may carry surveys:write on Free, but /api/v1/surveys returns 404 until the team upgrades to a plan that includes surveys. The same rule applies to any plan-gated resource (surveys, funnels, AI insights, custom retention): the ability is yours to mint, but the underlying resource is gated by the plan and answers 404 until you upgrade.
The REST API and MCP server themselves are available on every plan. Free is scoped to forms, submissions, links, and automations; Pro and above unlocks surveys, funnels, AI insights, and webhooks over both surfaces.
All abilities
| Ability | Powers |
|---|---|
forms:read |
List, fetch forms. |
forms:write |
Create, update, publish, unpublish, archive, restore, force-delete. |
forms:test-email |
Send test autoresponder / notification emails (no submission stored). |
submissions:read |
Read submissions, files, signed URLs. |
submissions:write |
Update, delete, bulk action. |
submissions:export |
CSV / JSON exports. |
webhooks:read |
List webhooks, deliveries. Plan-gated: Pro and above. |
webhooks:write |
Create, update, delete, replay. Plan-gated: Pro and above. |
surveys:read |
List, fetch surveys and their screens. Plan-gated: Pro and above. |
surveys:write |
Create, update, publish, unpublish, delete surveys. Plan-gated: Pro and above. |
polls:read |
List and fetch polls and results. |
polls:write |
Create and edit polls. |
polls:publish |
Publish and unpublish polls. |
polls:delete |
Archive and permanently delete polls. |
feedback:read |
Read feedback boards, posts, and the roadmap. |
feedback:write |
Create and edit boards and posts. |
feedback:moderate |
Change post status, merge, and moderate comments. |
feedback:publish |
Publish changelog announcements. |
feedback:delete |
Delete boards, posts, and comments. |
desk:read |
Read Response Desk threads and analytics. |
desk:reply |
Reply to customers from the Response Desk. |
desk:assign |
Assign, resolve, and route threads. |
desk:admin |
Manage Response Desk channels, macros, and settings. |
contacts:read |
List and fetch contacts. |
contacts:write |
Create, edit, merge, and delete contacts. |
action-classes:read |
List in-app survey triggers. |
action-classes:write |
Create and edit in-app survey triggers. |
segments:read |
List and preview audience segments. |
segments:write |
Create and edit audience segments. |
sdk-keys:read |
List website SDK keys. |
sdk-keys:write |
Create and revoke website SDK keys. |
displays:read |
Read survey impressions and delivery analytics. |
funnels:read |
List, fetch funnels. Plan-gated: Pro and above. |
funnels:write |
Create, update, delete; funnel authoring tools. Plan-gated: Pro and above. |
funnels:publish |
Publish or unpublish funnels. Plan-gated: Pro and above. |
funnels:analytics |
Funnel analytics and sessions. Plan-gated: Pro and above. |
funnels:delete |
Restore and permanently delete funnels. |
funnels:export |
Export funnel submissions. |
funnels:reveal |
Reveal encrypted sensitive funnel answers. |
links:read |
List, fetch short links. |
links:write |
Create, update, delete short links. |
links:analytics:read |
Read short link click analytics. |
bio:read |
List and fetch bio pages. |
bio:write |
Create and edit bio pages and blocks. |
bio:analytics:read |
Bio page views, visitors, and clicks. |
bio:audience:export |
Export and sync the bio page audience (personal data). |
bookings:read |
Read booking pages, appointments, and calendars. |
bookings:write |
Create and edit booking pages; approve, decline, and cancel appointments; manage calendars. |
bookings:publish |
Publish and unpublish booking pages. |
bookings:delete |
Delete, restore, and permanently delete booking pages. |
knowledge:read |
Read knowledge base articles and collections. |
knowledge:write |
Create and edit knowledge base articles, collections, and help-center settings. |
support:write |
Contact Formspring support. |
automations:read |
List automations and runs. |
automations:write |
Create, update, enable, disable, delete automations. |
automations:run |
Manually trigger or replay automation runs. |
billing:read |
Plan, usage, subscription state (MCP + API). |
billing:write |
Change subscription, apply coupons, buy credit packs. Team owners only. |
insights:read |
Read AI insights. Plan-gated: Pro and above. |
insights:write |
Trigger regeneration. Plan-gated: Pro and above. |
account:read |
Read your profile, dashboard summary, workspace search, and setup guide. |
account:write |
Update setup guide progress. |
projects:read |
List and read projects. |
projects:write |
Create, edit, and restore projects. |
projects:delete |
Archive and permanently delete projects. |
team:read |
Read workspace settings and theme. |
team:write |
Change workspace settings, theme, and address; create workspaces. |
team:delete |
Delete the workspace. |
members:read |
Read members and invitations. |
members:write |
Invite, remove, and change roles of members. |
approvals:read |
Read approval requests. |
approvals:write |
Approve or reject approval requests. |
sso:read |
Read single sign-on settings. |
sso:write |
Manage single sign-on connections and domains. |
email:read |
Read email sending settings. |
email:write |
Manage the mail server and sending domain. |
agency:read |
Read agency settings, client workspaces, and the client portal. |
agency:write |
Manage client workspaces, project assignment, and the client portal. |
tokens:read |
List your own tokens. |
tokens:write |
Mint and revoke tokens; new tokens cannot exceed your own abilities. |
Sensible token sets
Read-only dashboard scrape
forms:read
submissions:read
billing:read
Spam triage agent
forms:read
submissions:read
submissions:write
Backend service that creates submissions and forwards them
forms:read
submissions:read
webhooks:read
webhooks:write
Admin-grade automation
forms:read forms:write forms:test-email
submissions:read submissions:write submissions:export
webhooks:read webhooks:write
billing:read insights:read insights:write
tokens:read tokens:write
Token minting from a token
tokens:write can mint child tokens. The child's abilities must be a subset of the parent's; the API rejects any escalation attempt with 403. This means an admin token can hand out scoped read-only tokens to your team without giving each one full power.
Cross-team
Tokens are minted in a team. Cross-team reads return 404. Switch teams in the dashboard before minting tokens you'll use against a different workspace.
Code examples
See API examples → for JavaScript, Python, and Go snippets that show the required ability set beside each workflow.