Integrations Overview

The Integrations rail is where Flex Forms authenticates providers, stores reusable Connections, and wires each form’s outbound feeds. Submissions always save first; delivery runs asynchronously so a slow CRM never freezes the public fill page. This page is the map of everything that ships today. Each provider below has its own setup guide.

Flex Forms integrations — catalog, Connections, form feeds, and delivery reliability

How it fits together

Layer	Where	What it does
Catalog	Integrations → Catalog	Enable/disable providers; optional shared credentials (fallback when a feed has no Connection)
Connections	Integrations → Connections	Named, encrypted accounts (Production vs Sandbox, client A vs B). Prefer this for multi-account
Form feed	Form hub → Integrations	Per-form routing, field maps, Connection picker, conditions
Delivery ledger	Submission detail	Succeeded / failed / skipped attempts + Replay
Scheduled sync	Background	Refreshes remote pickers (lists, channels, sheets) for Connection-aware catalogs
Inbound	`POST /flex-forms/integrations/{driver}/webhook`	Provider → Flex Forms (HubSpot, Slack, Webhooks)

Platform unlockers (reCAPTCHA, Turnstile, Mapbox, Pexels, Stripe) stay Catalog-only — they unlock Studio/fill features, not multi-account CRM feeds. Stripe exception: payment options live on the Stripe Payment block. Stripe never appears on the form Integrations tab. Ledger: Transactions. Related: Conditional feeds · Custom integrations · Inbound webhooks

Complete provider catalog

Email marketing & newsletters

Integration	Auth	Connections	Typical feed
Mailchimp	API key (`-usXX`)	Yes	Audience, merge tags, tags, double opt-in
Campaign Monitor	API key	Yes	Client lists + custom fields
GetResponse	API key (Standard / MAX)	Yes	Campaign + custom fields
ConvertKit	API key / secret	Yes	Forms, sequences, tags
EmailOctopus	API key	Yes	List + extra fields
MailerLite	API token	Yes	Groups + custom fields
ActiveCampaign	API URL + key	Yes	Lists, tags, custom fields
Emma	Public + private keys	Yes	Groups + fields
Brevo	API key	Yes	Lists / contacts

Transactional email

Integration	Auth	Connections	Typical feed
SendGrid	API key (`SG.`)	Yes	Dynamic templates / mail send
Mailgun	API key + domain	Yes	Messages API

CRM & sales

Integration	Auth	Connections	Typical feed
HubSpot	Private App token	Yes	Contacts / forms + optional inbound
Salesforce	OAuth / client credentials	Yes	Lead / Contact / custom objects
Capsule CRM	Personal access token	Yes	Parties + opportunities

Collaboration, sheets & helpdesk

Integration	Auth	Connections	Typical feed
Google Sheets	OAuth refresh	Yes	Spreadsheet + sheet append
Slack	Bot token and/or webhook	Yes	Channel alerts + optional inbound
Trello	API key + token	Yes	Cards on a list
Breeze	API token	Yes	Tasks
Help Scout	Access token	Yes	Conversations + custom fields
Zapier	Catch hook URL	Yes	Catch Hook + field map
Webhooks	Shared secret (optional)	Yes	Signed JSON outbound + inbound

Security, analytics, media & payments

Integration	Auth	Connections	Role
Google Analytics	Measurement ID + MP secret	Catalog	Measurement Protocol events
Meta	Pixel / CAPI token	Catalog	Browser + Conversions API
Mapbox	Access token	Catalog	Address / map blocks
Pexels	API key	Catalog	Studio stock covers
reCAPTCHA	Site + secret	Catalog	Form Access CAPTCHA
Turnstile	Site + secret	Catalog	Form Access CAPTCHA
Stripe	Secret + webhook	Catalog	Stripe Payment Element + Transactions

Recommended setup path

Open Integrations

Flex Forms left rail → Integrations (separate from Global Settings).

Enable in Catalog

Turn the provider on. For a single shared account you may paste credentials here.

Prefer Connections for multi-account

Create a labeled Connection (Production, Sandbox, Client X). Credentials stay encrypted on the Connection.

Wire the form feed

Open the form → hub Integrations → enable the provider → pick Connection → map lists/fields → save.

Verify delivery

Submit a test fill. Open the submission → delivery ledger → confirm success or use Replay.

Changing the Connection on a feed reloads remote pickers (audiences, channels, sheets) for that account. Scheduled sync keeps those catalogs warm in the background.

Reliability & security (what “enterprise” means here)

Async dispatch

Jobs run after ingest. Queue workers absorb vendor latency; respondents never wait on Salesforce.

Delivery ledger + Replay

Every attempt is recorded. Soft failures (timeouts, 429, 5xx) can be retried; permanent 4xx stay failed for intentional Replay.

Circuit breaker

Repeated failures open a breaker per integration / Connection so one bad account does not flood the queue.

Outbound HTTP hygiene

Shared client: explicit timeouts, connect timeout, retries on transient errors, no redirects (SSRF), consistent User-Agent.

Encrypted credentials

Connection secrets use encrypted casts. Catalog secrets are redacted in Studio responses.

Conditional feeds

Send only when answers match rules — see Conditional feeds.

Timeouts vs intervals (why both exist)

Mechanism	What it is	Why it is enterprise
HTTP timeout	Max seconds a single outbound API call may run (typically 12–25s); config `filament-flex-forms.outbound_http.timeout`	Protects queue workers from hung vendors; fail → retry / ledger instead of blocking forever
Connect timeout	Max seconds to open TCP/TLS (5s); config `filament-flex-forms.outbound_http.connect_timeout`	Fails fast on dead hosts
Job backoff	Wait between job retries (e.g. 15s / 60s / 180s)	Gives rate-limited APIs room to recover
OAuth device `interval`	Provider-mandated poll spacing (RFC 8628)	Polling faster gets you `slow_down`; Flex Forms increases the interval when the provider asks

Timeouts are not a substitute for async jobs, and intervals are not HTTP timeouts — they solve different failure modes.

Build your own

Need a provider that is not listed? Register a custom driver with the same FieldMapper, Connections, delivery ledger, and circuit breaker as shipped integrations.

Creating integrations

Discover drivers from app/FlexForms/Integrations and ship first-party quality feeds.

Field mapping

Transform and nest payloads with FieldMapper.

OAuth tokens

Encrypted Connections, refresh locks, reconnect.

SDK helpers

GraphQL client, device-code OAuth, SAML assertion consumer.

Inbound webhooks

SupportsInboundWebhooks + idempotency ledger.

Events & hooks

Listen after ingest, publish, and deliveries.

​How it fits together

​Complete provider catalog

​Email marketing & newsletters

​Transactional email

​CRM & sales

​Collaboration, sheets & helpdesk

​Security, analytics, media & payments

​Recommended setup path

​Reliability & security (what “enterprise” means here)

Async dispatch

Delivery ledger + Replay

Circuit breaker

Outbound HTTP hygiene

Encrypted credentials

Conditional feeds

​Timeouts vs intervals (why both exist)

​Build your own

Creating integrations

Field mapping

OAuth tokens

SDK helpers

Inbound webhooks

Events & hooks

How it fits together

Complete provider catalog

Email marketing & newsletters

Transactional email

CRM & sales

Collaboration, sheets & helpdesk

Security, analytics, media & payments

Recommended setup path

Reliability & security (what “enterprise” means here)

Timeouts vs intervals (why both exist)

Build your own