Getting started

Instant endpoints

A form that works the moment it is pasted, with no account, dashboard, or API key. The only thing you need is the email address submissions should go to. Made for AI agents that build a site end to end, and for anyone who wants to skip setup.

The one line

code

<form action="https://shipmyform.com/to/[email protected]" method="POST">
  <input type="email" name="email" required />
  <textarea name="message" required></textarea>
  <!-- Anti-spam honeypot, leave this empty -->
  <input type="text" name="_gotcha" tabindex="-1" autocomplete="off" style="position:absolute;left:-9999px" />
  <button type="submit">Send</button>
</form>

What happens

The first submission creates the form. It is bound to the site it came from, spam-filtered like any other form, and stored.
We email the address once. The email names the site and links to an activation page. It never includes what the visitor typed, because the address has not been proven yet.
One click activates it. That creates a free account for the address, opens the inbox with the held submissions, and turns on email notifications.
From then on it is an ordinary form with the full product: spam filtering, connectors, exports, and the dashboard.

Already have an account?: If the address belongs to a ShipMyForm account, there is nothing to activate. The form appears in that workspace named after the site, and notifications start with the first submission.

Limits before activation

Held submissions	10 per form. Later ones are not stored; the visitor still sees a success page.
Held for	14 days, then the placeholder account and its submissions are deleted.
Activation emails	At most one a day and three in total per address.
Where it works	From a web page only. Requests with no Origin or Referer are refused.
File uploads, connectors	Available after activation, per plan.

For AI agents

Ask the user which email address should receive submissions, then use that address in the form's action. Do not invent an address. Tell the user that the first real submission sends them an activation email. If you have an API key, prefer the MCP server and a normal /f/<formId> endpoint, which keeps the address out of the page source.

Trade-offs to know about

The address is visible in your HTML, where scrapers can find it. After activating, copy the form's /f/<formId> endpoint from the dashboard and swap it in. Both URLs keep working.
One form per address per site. The same address on another domain becomes a separate form, and a form only accepts submissions from the site that created it.
Disposable inboxes are refused.