About this plugin
Promptless Forms is a lightweight WordPress form plugin built for developers and design-system-aware sites. Configure forms via JSON in the admin UI or via PHP code, render them with a shortcode, and send submissions to webhooks, email, or both.
Core features
- JSON or PHP form configuration
- 13 field types: text, email, tel, textarea, select, radio, checkbox, file, hidden, message, section, date, and address (with Google Places autocomplete)
- Multi-step forms with progress indicators
- Conditional field visibility based on other field values
- Column layouts (1/2, 1/3, 2/3, 1/4, 3/4) and section grouping
- Webhook delivery with HMAC-SHA256 signing and SSRF protection
- Email notifications with template variables
- Spam protection: honeypot, timing check, and rate limiting
- CSV export of form entries
- File upload handling with magic-byte verification
Integration
When the Promptless WP plugin is active, Promptless Forms automatically inherits design tokens (colors, typography, border radius) from the global brand settings. Forms also support dark mode through Promptless’s theme_variant setting. The plugin works fully standalone with sensible defaults when Promptless WP is not active.
For developers
- Stable hook surface for extending behavior ( pforms_submission_complete, pforms_webhook_payload, pforms_field_display_value, etc.)
- Connector REST API for external integration (default-disabled, opt-in via admin toggle)
- WordPress coding standards compliant
- Transactional InnoDB storage for entries
External Services
This plugin can optionally connect to external services. Each service is opt-in and requires explicit configuration by a site administrator.
Webhooks (when configured per-form):
Submission data is POSTed to a URL of your choosing. The URL, request payload, and signing secret are all configured by the site administrator on a per-form basis. No data is sent until a webhook URL is configured.
Google Places API (when the Address field is used):
The Address field uses Google’s Places API to provide address autocomplete. Requires a Google Places API key configured in the plugin settings. Address queries are sent to Google when users type in the field.
See Google’s Places API Terms and Privacy Policy.
Twilio API (when configured):
The optional Twilio module sends SMS messages and handles missed-call text-back workflows. Requires Twilio account credentials configured in the plugin settings. Phone numbers and message content are sent to Twilio for delivery.
See Twilio’s Terms of Service and Privacy Policy.
Claude Cowork Connector (default-disabled, opt-in):
The Connector exposes a REST API allowing AI agents (such as Anthropic’s Claude Cowork) to manage forms via WordPress Application Passwords. Default state is disabled. To enable, an administrator must explicitly toggle the connector on in Form Entries → Connector and generate a per-user Application Password.
No external requests are made by the connector — it only responds to authenticated incoming requests.