Developer API

import requests

API_KEY = "sf_live_YOUR_KEY"
BASE = "https://signforge.io/api/v1"
HEADERS = {"X-API-Key": API_KEY, "Content-Type": "application/json"}

# List available templates
templates = requests.get(f"{BASE}/templates", headers=HEADERS).json()
template = templates["items"][0]
print(f"Using template: {template['name']}")

# Create an envelope from template with prefilled fields
resp = requests.post(
    f"{BASE}/templates/{template['id']}/use",
    headers=HEADERS,
    json={
        "recipients": [
            {"email": "client@company.com", "name": "Jane Doe"}
        ],
        "title": "NDA — Jane Doe",
        "prefill_fields": {
            "date": "2026-04-14",
            "company_name": "Acme Corp"
        },
        "send_immediately": True,
    },
)
data = resp.json()
print(f"Envelope: {data['id']}, Status: {data['status']}")

# Place fields by finding text anchors in the PDF
resp = requests.post(
    f"{BASE}/envelopes/{envelope_id}/anchor-fields",
    headers=HEADERS,
    json={
        "anchors": [
            {
                "anchor_text": "Signature:",
                "field_type": "signature",
                "recipient_index": 0,
                "offset_x": 0.15,
                "offset_y": 0.01,
                "width": 0.25,
                "height": 0.04,
            },
            {
                "anchor_text": "Date:",
                "field_type": "date",
                "recipient_index": 0,
                "offset_x": 0.08,
                "offset_y": 0.01,
            },
        ]
    },
)
result = resp.json()
print(f"Created {result['fields_created']} fields, {result['fields_not_found']} not found")

import requests, base64

with open("contract.pdf", "rb") as f:
    pdf_b64 = base64.b64encode(f.read()).decode()

response = requests.post(
    "https://signforge.io/api/v1/quick-sign",
    headers={"X-API-Key": "sf_live_YOUR_KEY"},
    json={
        "title": "Service Agreement",
        "pdf_base64": pdf_b64,
        "signer_email": "client@company.com",
        "signer_name": "Alex Chen",
    },
)

data = response.json()
print(f"Envelope: {data['envelope_id']}")
print(f"Status: {data['status']}")

import requests

API_KEY = "sf_live_YOUR_KEY"
BASE = "https://signforge.io/api/v1"
HEADERS = {"X-API-Key": API_KEY, "Content-Type": "application/json"}

# 'envelope_ids' is your batch of two-signer envelopes (company = signing_order 1,
# recipient = signing_order 2, sequential, anchored on both blocks).
resp = requests.post(
    f"{BASE}/bulk-sign-sessions",
    headers=HEADERS,
    json={
        "signer_email": "vphr@yourco.com",
        "signer_name": "Asha Verma",
        "envelope_ids": envelope_ids,           # or "batch_id": "..."
        "representative_envelope_id": envelope_ids[0],
        "consent_statement": "I, as authorised signatory, execute the company "
                             "block on all letters in this batch.",
    },
).json()

print(resp["sign_url"])        # hand this to your authorised signer
print(resp["envelope_count"])  # e.g. 700

# Poll progress (or subscribe to bulk_sign.completed / bulk_sign.failed)
status = requests.get(
    f"{BASE}/bulk-sign-sessions/{resp['session_id']}", headers=HEADERS
).json()
print(status["signed"], "/", status["total"])

{
  "event": "envelope.completed",
  "envelope_id": "550e8400-e29b-41d4-a716-446655440000",
  "timestamp": "2026-03-25T12:00:00Z",
  "data": {
    "title": "Service Agreement",
    "status": "completed",
    "recipients": [
      {
        "email": "signer@example.com",
        "name": "Jane Doe",
        "status": "signed",
        "signed_at": "2026-03-25T11:59:00Z"
      }
    ],
    "download_urls": {
      "signed": "/api/v1/envelopes/{id}/documents/signed",
      "certificate": "/api/v1/envelopes/{id}/documents/certificate"
    }
  }
}

const crypto = require("crypto");

function verifyWebhook(body, signature, secret) {
  const expected = crypto
    .createHmac("sha256", secret)
    .update(body)
    .digest("hex");
  return crypto.timingSafeEqual(
    Buffer.from(expected),
    Buffer.from(signature)
  );
}

// In your Express handler:
app.post("/webhook", (req, res) => {
  const sig = req.headers["x-webhook-signature"];
  if (!verifyWebhook(req.rawBody, sig, WEBHOOK_SECRET)) {
    return res.status(401).send("Invalid signature");
  }
  const event = req.body;
  console.log("Event:", event.event, event.envelope_id);
  res.sendStatus(200);
});