feedback.tools Public API

Public endpoints for submitting survey responses and events from any client — the web widget, a hosted survey page, a mobile app, or a server.

Authentication

Send your publishable key in the Authorization header:

Authorization: Bearer pk_...

The key is optional. With a key, the request is authorized and no Origin/Referer is required (use it for mobile, server-to-server, and hosted pages). Without a key, the request falls back to domain-locking and must come from a browser on the survey's allowed domain. The publishable key is not a secret — it is meant to be embedded in client code.

Sessions

A session_uuid groups all calls of one survey-taking session. The canonical flow is:

1. Call init (you may omit session_uuid). The response returns a session_uuid generated by the server.
2. Reuse that session_uuid in every following respond and event call for the same survey.

In a browser the widget also stores it in a per-survey cookie. A session_uuid belongs to a single survey — do not reuse one across different surveys (you will get a 409). Omitting session_uuid always starts a fresh session.