Permissions to the field
Grant read, create, update, publish and delete per collection, record and field. Visitors get a separate, read-only guest actor.
Security
Governance built in, not bolted on.
Every route to your data (admin, API and AI agents) goes through the same services and permissions.
How it works
One authorization path
The admin UI, REST API and MCP server all call the same services, so a rule written once applies everywhere.
Safe content
No stored ERB. Page content is sanitized and components come from an allowlist.
Audit trail
Every change, and every denied agent call, recorded with who and when.
Secrets handled
SMTP and connector secrets are encrypted at rest. Connectors fetch through an SSRF guard.
Rate limits
Sign-in, API and MCP endpoints are rate limited by user.
For security teams
SSO and SCIM
SAML and OIDC sign-in with automated provisioning. Enterprise.
Enforced 2FA and IP allowlists
Require TOTP for every account and restrict access by network. Enterprise.
BYOK and audit export
Bring your own encryption keys and stream audit events to your SIEM. Enterprise.
Formscaler is in early access and has not completed third-party audits. Report vulnerabilities to security@formscaler.com; we acknowledge within 2 business days.
Send us your security questionnaire.
We will answer it from the codebase and the architecture decision records.