ApplyOnce
Partner documentation

A clearer application API for every form.

Start with one hosted link. Move to scoped APIs and signed webhooks when your admissions or exam workflow is ready.

Hosted forms

Ship an applicant experience in one afternoon.

Publish a mobile-ready form with a purpose statement, field mapping, consent preview, and receipt included.

Open partner workspace
Trust by design

Ask only for the slice you need.

Every form version carries its own requirements, purpose, and data scope. Applicants review it before they share.

Source-aware prefill Consent receipt Duplicate-safe submit
Integration surface

Use the layer that fits your team.

Forms are the default. APIs and webhooks keep your existing systems in control when you need deeper integration.

Hosted form

Share /portal/your-form and let ApplyOnce manage the applicant flow, document handoff, consent, and receipt.

REST API

Use versioned contracts, organization-scoped keys, Zod validation, and idempotency keys.

Signed webhooks

Receive status changes with timestamped HMAC signatures and retry visibility.

API shape

Small contracts. Clear ownership.

These are the public contract names. The product keeps official integrations separate from the stable application layer.

GET/api/v1/forms/:slugRead a published form definition
POST/api/v1/forms/:slug/submitSubmit after reviewing purpose-bound consent
GET/api/v1/partner/formsList forms in the authenticated partner workspace
POST/api/v1/partner/formsCreate a draft form with fields and requirements
POST/api/v1/partner/forms/:id/publishPublish a form and its hosted URL
PATCH/api/v1/partner/submissions/:id/statusMove a submission through review
POST/api/v1/partner/api-keysCreate a scoped API key, shown once
GET/api/v1/partner/webhooks/:id/deliveriesInspect signed delivery attempts
Integration status is always explicit.DigiLocker and MeriPehchaan are approval-pending; APAAR is unavailable for production third-party retrieval. Live access appears only after credentials, permissions, and end-to-end requests are verified.
Read the boundary