FormRelay
Webflow Permissions
When you connect a site, Webflow shows you what FormRelay is asking for. This page explains each permission, what it is used for, and what FormRelay cannot do with it.
FormRelay is a Data Client app. It has no Designer Extension, and it never runs inside the Designer canvas.
The four permissions
| On the Webflow screen | Scope | What FormRelay does with it |
|---|---|---|
| Read Authorized User data | authorized_user:read |
Reads the name and email of the person who authorized the app, so your grant is matched to your FormRelay account and support can identify you. |
| Read Site data | sites:read |
Lists the site you authorized, reads its name and short name for the "Open in Designer" links, and lists the webhooks FormRelay registered so the site page can show whether the connection is healthy. |
| Read Form data | forms:read |
Lists your forms and their fields, so you can pick a form and map its fields to a destination. |
| Edit Site data | sites:write |
Registers and removes FormRelay's own form_submission webhook. Nothing else. |
What FormRelay does not do
Edit Site data is the only write permission, and the only writes FormRelay makes are creating and deleting its own webhook. It does not publish your site, does not create or edit pages, does not add or change custom code, does not change site settings, domains or SEO fields, and does not write CMS content.
FormRelay also never reads your stored form submissions from Webflow. Submissions reach FormRelay only through the webhook, at the moment someone submits the form, and every delivery is signature-checked before it is processed.
One site per authorization
FormRelay is installed per site. The Webflow screen asks you to pick a single site, and the access it issues covers only that site — it cannot see or touch your other sites. Connecting a second site means authorizing again and picking that one.
How the access is stored
The access token Webflow issues is encrypted and kept on our server, against the site it was issued for. It is never sent to your browser and never appears in a URL or a log.
If you uninstall FormRelay in Webflow, or revoke its access, FormRelay deletes that token — see Disconnecting & Removing.