n8n

Choose Send to n8n in Actions → Automation. Configure a public HTTPS Webhook URL and matching Header Auth or Basic Auth credentials. Credentials are used only in headers. Redirects and private-network destinations are rejected.

Start from the bundled workflow. Import it into n8n, create a Header Auth credential named X-Core-Forms-Key with a secret of your choice, assign it to the Webhook node, and use the same header name and value in Core Forms. Publish the workflow and copy its production webhook URL.

The template acknowledges receipt. Add your business operations before Respond to Webhook if its response should depend on those operations finishing. It does not provide downstream deduplication: use event_id in your destination or workflow storage when operations must resist repeated requests.

Choose the payload

Fields to send accepts comma-separated field names. Blank sends metadata only. * explicitly includes non-internal fields. The envelope contains event, event_id, form_id, form_title, form_slug, submission_id, submitted_at, and entry. IP address, user agent, nonce, and raw request data are not added. File metadata excludes local server paths.

Custom entry JSON replaces the field list. For example:

{"contact":{"email":"[EMAIL]"},"topics":"[TOPICS]","count":"[COUNT]"}

JSON is parsed before values are inserted. Exact field tokens preserve arrays, numbers, booleans, and null; text inputs remain strings. An exact token referencing a missing field fails with an actionable error. Metadata keys cannot be overwritten by the entry map.

Test and activate

Site administrators can expand Test action, edit the JSON sample, and send a test request. While n8n listens for a test event, its /webhook-test/ URL works in this tester. Live form submissions reject that URL; save the production URL before accepting submissions. Custom n8n endpoint prefixes still require the operator to select the correct production URL.

HTTP acceptance does not prove every downstream node succeeded. See n8n's execution log. Network failures, rate limits, and server errors use Core Forms' retry policy when submission storage is enabled.

Reference: n8n Webhook node.