Forms

Forms are a way to collect submissions directly through Sentinel — a shortcut when you don't want to build and host a verification endpoint yourself, per Server Integration.

Create a form

Open the Forms section in the admin interface.
Click Create Form.
Give it a name (e.g. "Contact Form").
Leave the remaining settings at their defaults for now — see Form settings below to adjust them later.
Click Save.

This assigns the form a unique slug, used in its submission URL.

Using a form

Point your HTML form's action at Sentinel's submission endpoint, with method="post", and include the ALTCHA widget inside the form:

<form method="post" action="https://sentinel.example.com/v1/submit/your-form-slug">
  <!-- your form fields -->

  <altcha-widget
    challenge="https://sentinel.example.com/v1/challenge?apiKey=key_..."
  ></altcha-widget>

  <button type="submit">Send</button>
</form>

Submissions without a valid ALTCHA payload are rejected. If you renamed the widget's hidden field (via its name attribute), tell Sentinel which field to expect by appending ?altchaField=custom_name to the submission URL.

Content submitted through a Form can be scored using Sentinel's content-moderation features — see Classifier, Phishing Detection, and Similarity & Training Data.

Form settings

Slug — a unique, URL-friendly identifier used in the submission URL. Must be unique across all accounts on the instance.
Status — Active accepts submissions; Inactive rejects them with an error response.
Uploads — enable file uploads and optionally cap the maximum file size. Requires the altcha/upload plugin to be installed — uploads won't work without it.
Proxy — forward accepted submissions on to another backend service, preserving the original POST method and Content-Type header, with the submission forwarded unmodified.
Email Notifications — send an email whenever a submission comes in. Configure your SMTP connection as a URL:
```
smtp://USER:PASSWORD@smtp.example.email
```
Optional parameters: from, replyTo, secure=true, ignoreTLS=true, requireTLS=true, rejectUnauthorized=false.

Security Groups — Forms are subject to their Security Group's rules.
Secure Form Submissions — a walkthrough for a general-purpose contact/feedback form.