Use the official Onlyform SDKs for JavaScript, TypeScript, and PHP.
Official Onlyform SDKs are available from npm and Packagist. Both clients cover forms, blocks, workspaces, submissions, analytics, and webhooks, and expose structured API errors and ETag-based writes.
API keys are server credentials. Never put an Onlyform API key in browser code, mobile binaries, or a public repository.