The API key reads, it does not write
A key can create nothing and change nothing, whatever its scope. That is not a gap but the rule: a key ends up in somebody's backup sooner or later. Writing needs an access that a person granted in a browser.
For developers and agencies
A form in asksteps is not an island. Embed it with one line of HTML, drop it into WordPress, collect every submission by webhook, or read the data through the API. Which of those your plan includes is listed below. So is what an access key is not allowed to do.
The free account needs no payment details.
The form is a web component: you place the element on your page and pass the form's id. No iframe. asksteps serves its own fonts, so nothing is fetched from a third-party CDN.
There is a plugin with a shortcode, a Gutenberg block and an Elementor widget. The picker you choose your form from is included in every plan, the free one as well. Statistics and submissions inside the WordPress backend start with Starter.
A webhook reports every completed submission to an address of your choice. That way asksteps hangs off your system without anyone exporting anything. From Professional.
The REST API is described as an OpenAPI document at "/api-docs"; tools that read OpenAPI can wire it up directly. Authentication is a key in the "x-api-key" header. API access belongs to the Business plan.
Custom HTML
A section inside the form that you write yourself in HTML and CSS. A price table, a comparison grid, a note box, an input mask that has to look exactly this way and no other. Where the builder stops, you keep writing. Any fields you put in there are real: the answers land in the inbox like all the others.
Inbox
Submissions with a processing status and a note, free-text search, uploaded attachments, and the completed PDF to download. For spreadsheets, there's a CSV export.
A key can create nothing and change nothing, whatever its scope. That is not a gap but the rule: a key ends up in somebody's backup sooner or later. Writing needs an access that a person granted in a browser.
A section you write yourself. Input fields inside it are captured for real and land in the inbox — including in a form that came from a PDF, without losing the mapping back to the document. No JavaScript.
A form runs under your address once you have confirmed the domain with a TXT record; asksteps takes care of the certificate. A subdomain at asksteps works the same way. Own domains from Starter.
Status, note, search, attachments, the filled-in PDF, CSV export and the numbers for the last 30 days. For many cases that is the integration you do not have to build.
Interface and content in German, English, Italian, Spanish and Turkish. Translations happen in their own editor, not in a second copy of the form. Several languages from Professional.
On our own infrastructure at the German host netcup, not at a large cloud provider. Analytics through a self-hosted Matomo. What does leave the server is named: payments through Stripe (USA), email through Brevo (France).
No. The widget, the fixed address at asksteps and the form picker in the WordPress plugin are in every plan. Removing the asksteps line from the form starts with Starter.
Not with an API key — that one only reads. Creating and changing goes through the MCP access for AI agents, where a person grants permission in a browser.
No. There are webhooks from Professional and the read-only API from Business. Anything beyond that you build yourself, or with a tool that speaks OpenAPI and webhooks.
It stays tied to the document. Downloading produces a copy of the original with the answers written in; fields nobody filled keep their original value. The filled PDF is not stored — it only comes into existence at download time.
Yes, through the MCP server. It takes a plan from Starter up and a switch in your account that is off by default. The details are on the MCP server page.
The free account needs no payment details: one form, 50 submissions a month, PDF import and signature included.
Create an account