Web forms

Collect enquiries from your site in the Wrap inbox. A web form channel turns every submission into a conversation.

Three ways to use it

A hosted page. Wrap publishes a public page with a ready-made form. Share the URL and every submission lands in the inbox.

An iframe. Embed that same page in your site.

Your own form. POST JSON to the public endpoint with channelInstanceId, email, message, and optionally name and phone. Open the channel's Settings tab to copy the exact URL, the parameter list and a cURL example.

HMAC signing

Set a secret on the channel's Advanced tab, and Wrap then requires a signature on every submission. Compute an HMAC-SHA256 of the raw request body and send it as X-Wrap-Signature: sha256=<hex>. Wrap rejects anything unsigned or signed wrong.

Without a secret, Wrap accepts anonymous posts with a limit of 20 per minute per IP and form. That limit is a minimal net, not a defence: if the form is exposed, put a captcha in front of it on your own site.

The form decides the workspace, not the submission. Nobody posts an enquiry into somebody else's workspace by changing a field in the JSON.

What each submission creates

Each submission lands in the inbox as a conversation. A repeat enquiry from the same contact joins the conversation it already has on that form. If the email or phone that arrives matches no contact, Wrap also creates the contact and records "web form" as its source.

No messaging window

Reply whenever you like: a form has no window. Your reply goes out by email.