Fillo

无头表单基础设施——表单在你的产品中原生渲染(无iframe),文件通过浏览器直传到你拥有的存储,编码代理可以通过MCP配置、发布和查询它们。

文档

Fillo — forms inside your product, with your UI.

Docs · Guides · Agents · Changelog

npm version MIT license

The Fillo MCP server. It gives a coding agent the full Fillo loop — provision a workspace, scaffold a form into the host repo, publish it, and query its responses — without leaving the session, authenticated exactly like a human CLI user.

Install

One click, if your editor supports it:

Add to Cursor Add to VS Code

Claude Code:

claude mcp add fillo -- npx -y @usefillo/mcp

Any other MCP client: run npx -y @usefillo/mcp over stdio. Set FILLO_API to point at a non-production deployment.

Credentials

The server reads the same credentials the CLI writes to ~/.fillo/config.json, or from the environment:

  • FILLO_TOKEN — a fcli_… login token (from npx @usefillo/cli login). Authenticated tools (fillo_list_forms, publishing to a claimed workspace, and local project selection with an ordinary login).
  • FILLO_PK — a pk_… publishable key. fillo_provision_workspace mints one and saves it for you.
  • FILLO_API_KEY — a fsk_… project API key, minted in Settings → Connections of a claimed workspace. Required by the response tools.
  • FILLO_API — overrides the origin (default https://fillo.so).
  • FILLO_CONFIG_DIR — overrides the config directory (default ~/.fillo).

The server never prints login tokens, API keys, or claim tokens into the transcript. The pk_ publishable key is safe to surface (it lives in browser code), so fillo_provision_workspace returns it for you to wire into the app's public env.

Tools

ToolAuthWhat it does
fillo_provision_workspacenone (needs an email)Create an unclaimed preview workspace, return its pk_ key and caps, and email its claim link.
fillo_whoamilogin token or pk_Report the active credential, workspace, and project.
fillo_list_projectsordinary login tokenList projects in the current workspace and mark the current selection.
fillo_create_projectordinary login tokenCreate and select an isolated project and save its pk_ key.
fillo_select_projectordinary login tokenSelect by id, slug, or unique exact name and update local project state.
fillo_push_formlogin token or pk_Create or update a form from a schema + handle.
fillo_list_formslogin tokenList the project's forms.
fillo_get_formnone (published)Fetch a published form's schema, theme, and capabilities.
fillo_search_examplesnoneSearch the curated Fillo example library.
fillo_docsnoneFetch a Fillo docs page as Markdown by topic.
fillo_list_responsesfsk_ API keyList a form's responses (claimed workspaces only).
fillo_get_responsefsk_ API keyFetch one response (claimed workspaces only).
fillo_response_summaryfsk_ API keySummarize a form's responses without reading every row (claimed workspaces only).
fillo_claim_statuspk_Report the provisioned workspace's caps and claim deadline.

No destructive tools. Every tool is a thin wrapper over Fillo's public HTTP API — the server never touches the database and imports no app code, so workspace scoping, rate limits, and validation stay in one place.

The three project tools are local-only and require the general token minted by fillo login. A project-specific handoff and a hosted remote-MCP OAuth grant remain pinned to the project a human approved. Selecting locally also clears cached preview and fsk_ state from the prior project; replace any FILLO_PK or FILLO_API_KEY environment overrides yourself.

Projects are sites/apps beneath one billed workspace. They isolate forms, publishable/API keys, allowed origins, respondent identities, and agent authority. Workspace membership, billing, storage connections, and usage totals remain shared.

Links

MIT licensed.