Updated March 2026
Yes. One key, many forms, many sites. No per-site restriction.
Your API key (st_live_ prefix) is a management credential. You use it to create forms, read submissions, configure webhooks. Each form gets a unique ID and two public URLs: a hosted page at sutrena.com/f/{id} and a submission endpoint at /api/forms/{id}/submit.
The submission endpoint is public, no auth required. By design -- submissions come from users' browsers, and you never put API keys in frontend code. Because the endpoint is identified by form ID, it works from any domain without CORS issues. One form on your marketing site, another in your SaaS app, a third on a client's Shopify store. Same account.
Create a separate form per site or use case. Give each a descriptive name. Embed each on its respective site, or point your custom frontend at the form's submission endpoint. Data stays cleanly separated per form.
Webhooks can route to different destinations per form. Marketing submissions go to your CRM. SaaS submissions go to Slack. Each webhook links to specific forms.
Dashboards are per-form too. Share one form's dashboard with a client without exposing others.
Keep the API key secret. Environment variables or a secrets manager. Never in frontend code. The key is only for management operations. User-facing operations (submitting, viewing public dashboards) need no key.
For agencies managing a few client sites: Builder at $9/month covers 50 projects. Need more? Pro at $29/month covers 200 projects across all client sites. Scale at $79/month removes all limits.
# Create forms for 3 different sites with one API key
# Site 1: Marketing website contact form
curl -X POST https://sutrena.com/api/forms \
-H "Authorization: Bearer st_live_your_key" \
-H "Content-Type: application/json" \
-d '{
"name": "Marketing Site - Contact",
"fields": [
{ "name": "email", "label": "Email", "type": "email", "required": true },
{ "name": "company", "label": "Company", "type": "text" },
{ "name": "message", "label": "Message", "type": "textarea", "required": true }
]
}'
# Returns: { "id": "form_abc", "url": "https://sutrena.com/f/form_abc" }
# Site 2: SaaS app feedback form
curl -X POST https://sutrena.com/api/forms \
-H "Authorization: Bearer st_live_your_key" \
-H "Content-Type: application/json" \
-d '{
"name": "SaaS App - Feedback",
"fields": [
{ "name": "rating", "label": "Rating", "type": "number", "min": 1, "max": 5, "required": true },
{ "name": "feedback", "label": "Feedback", "type": "textarea", "required": true }
]
}'
# Returns: { "id": "form_def", "url": "https://sutrena.com/f/form_def" }
# Site 3: Client Shopify store inquiry form
curl -X POST https://sutrena.com/api/forms \
-H "Authorization: Bearer st_live_your_key" \
-H "Content-Type: application/json" \
-d '{
"name": "Shopify Store - Inquiry",
"fields": [
{ "name": "name", "label": "Name", "type": "text", "required": true },
{ "name": "email", "label": "Email", "type": "email", "required": true },
{ "name": "product", "label": "Product Interest", "type": "text" }
]
}'
# Returns: { "id": "form_ghi", "url": "https://sutrena.com/f/form_ghi" }
# Embed each on its respective site:
# <script src="https://sutrena.com/embed.js" defer></script>
# <div data-sutrena-form="form_abc"></div> <!-- on marketing site -->
# <div data-sutrena-form="form_def"></div> <!-- on SaaS app -->
# <div data-sutrena-form="form_ghi"></div> <!-- on Shopify store -->