52. Zapier/Make Integration Deep Dive

Detailed setup for connecting Fillin Forge to Zapier and Make (Integromat).

Zapier Setup

1. Create a new Zap with a Webhooks by Zapier trigger (select “Catch Hook”)
2. Zapier generates a URL: https://hooks.zapier.com/hooks/catch/123456/abcdef/
3. Paste this URL into the Fillin Forge “Webhook URL” field
4. Submit the form on the page. The Send a test submission button of the builder does not call webhooks
5. In Zapier, click “Test Trigger” to capture the data
6. Map fields in your action step:

Name:    {{fields__field_1__value}}
Email:   {{fields__field_2__value}}
Message: {{fields__field_3__value}}

Make (Integromat) Setup

1. Create a new scenario with a Custom Webhook module
2. Copy the generated URL (e.g., https://hook.eu1.make.com/abcdef123)
3. Paste it into the Webhook URL field of the form and submit the form on the page
4. Access fields: fields.field_1.value

n8n Setup

1. Create a Webhook node (set method to POST)
2. Copy the production URL
3. Access fields: {{ $json.fields.field_1.value }}

{
  "name": "{{ $json.fields.field_1.value }}",
  "email": "{{ $json.fields.field_2.value }}",
  "form": "{{ $json.form_title }}",
  "submitted_at": "{{ $json.timestamp }}"
}

Checking That a Call Comes From Your Form

Fillin Forge does not sign the payload and has no filter to add a signature. To let your endpoint tell your site from anyone else, put a secret in the custom headers of the webhook settings, one Name: value per line:

X-Form-Token: your-shared-secret

and check it on the receiving side:

// Receiver (your custom endpoint)
$token = $_SERVER['HTTP_X_FORM_TOKEN'] ?? '';
if ( ! hash_equals( 'your-shared-secret', $token ) ) {
    http_response_code( 401 );
    exit( 'Invalid token' );
}