> ## Documentation Index
> Fetch the complete documentation index at: https://broker-docs.newyorkcityservers.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Publish and Embed Forms

> Publish a public form, allow embed domains, set trusted IPs, and review submissions.

Use a public link to share a form. Use an iframe to show the same form on your website. A visitor does not need a Broker Panel account to open or submit an active public form.

## Share A Form

A new form is active by default. The form builder success screen shows **Share Your Form**: select **Display Language** if the form has a saved translation, then use **Direct Link** to copy the **Form URL** or the open icon to test it in a new browser tab.

<img src="https://mintcdn.com/nycs-partner-portal/P-PivY7wgrANbTTC/images/broker/integrations/form-share-dialog.png?fit=max&auto=format&n=P-PivY7wgrANbTTC&q=85&s=c7bddb3f4ef690a633a91969a7bdb4e1" alt="Form sharing dialog with an iframe embed snippet" width="800" height="338" data-path="images/broker/integrations/form-share-dialog.png" />

For an existing form, use **Copy Form URL** or **Open Form** in the row's **Manage** menu, or the copy icon in the **Direct URL** column. See [Form Center](/broker/integrations/form-center) for form building and management.

## Allow An External Embed Domain

The allowed-domain list applies to all forms for your broker. The form can always run in a same-origin iframe. You must add each external website origin before that website can show the form.

<img src="https://mintcdn.com/nycs-partner-portal/P-PivY7wgrANbTTC/images/broker/integrations/embed-domains.png?fit=max&auto=format&n=P-PivY7wgrANbTTC&q=85&s=e262638031ed53c3098cd6c08737a37e" alt="Manage Embed Domains dialog with allowed domain entries" width="672" height="595" data-path="images/broker/integrations/embed-domains.png" />

1. Select **Form Settings** in **Form Center**.
2. Select **Manage Embed Domains**.
3. Enter one origin per line in **Allowed Domains**.
4. Select **Save Changes**.

Use a full HTTPS origin. The saved value includes the protocol, host, and port when present. The panel removes any path from the saved value. HTTP is accepted only for localhost through this dialog.

Add each required origin separately. A different protocol, subdomain, or port is a different origin. If you clear **Allowed Domains**, external websites cannot frame the forms.

## Embed An Existing Form

Add the external website origin first. Then copy the generated iframe code.

1. Find the form in **Form Center**.
2. Select **Manage**.
3. Select **Get Embed Code**.
4. Select a value in **Language**.
5. Select **Copy**.

Paste the copied iframe code into the HTML for your website. The generated iframe uses the full width of its container and a height of 500 pixels. You can change these display values in your website code.

The **Language** list contains English and the saved translations for that form. The generated URL includes the selected language when you do not select English.

You can also copy the same iframe code from **Embed Code** on the form builder success screen.

## Active And Inactive Forms

An **Active** form can load from its public URL and can accept submissions.

To stop a form:

1. Find the form in **Form Center**.
2. Select **Manage**.
3. Select **Deactivate**.

The status changes to **Inactive**. The direct URL and existing iframe code no longer load the form. The submission service also rejects a submission if the form is inactive.

To publish the form again, select **Manage**, and then select **Activate**.

## Trusted IPs And Rate Limits

Public form submissions have a broker-wide rate limit. One source IP can send five form submissions in a 60-minute window for one broker. The next submission is blocked until the rate-limit window permits another submission.

A trusted IP bypasses only this public form submission rate limit. It does not bypass form status checks, spam checks, or field validation.

1. Select **Form Settings** in **Form Center**.
2. Select **Trusted IPs**.
3. Enter one IP address per line in **Trusted IP Addresses**.
4. Select **Save Changes**.

The panel accepts individual IPv4 and IPv6 addresses. It does not accept IP ranges or CIDR notation. Clear the field and save to disable the trusted-IP bypass.

Only add an IP that you control and trust. Do not add a visitor IP to avoid a temporary rate limit.

## Review Submissions

A successful submission creates a New Service request with **Form** as its source. The form's **Approval** value controls what happens next:

* **Manual** keeps the request pending for staff review.
* **Automatic** starts system approval after the request is created. If system approval cannot complete, the request stays pending.

To review submissions for one form:

1. Find the form in **Form Center**.
2. Select **Manage**.
3. Select **View Submissions**.

The panel opens the **Requests** page and applies the form filter. A successful visitor sees the configured success message. The public form also redirects the visitor if the form has a redirect URL.

## Troubleshooting

### Direct-Link Or Embed Controls Are Not Available

The broker does not have a slug. Contact support to configure it.

### The Public Form Does Not Load

Confirm that the row has the **Active** status. Then use **Manage** > **Open Form** to test the current URL. An incorrect broker slug, an incorrect form slug, or an inactive form returns a not-found page.

### The Website Refuses To Show The Iframe

Open **Form Settings** > **Manage Embed Domains**. Confirm that **Allowed Domains** contains the exact parent website origin. Check the protocol, subdomain, and port. Save the change and reload the parent website.

If the embed-domain lookup fails, the panel permits same-origin framing only.

### **Manage Embed Domains** Rejects An Entry

Enter one full URL per line. Use HTTPS for an external website. Remove paths that are not part of the website origin.

### **Trusted IPs** Rejects An Entry

Enter one individual IPv4 or IPv6 address per line. Remove ranges, CIDR suffixes, and other text.

### A Visitor Sees A Rate-Limit Message

The source IP reached five submissions in the 60-minute window for this broker. Wait for the window to permit another submission. Use **Trusted IPs** only for a fixed source IP that you control.

### A Submission Does Not Appear In **Requests**

Confirm that the visitor saw the success message. Use **Manage** > **View Submissions** to apply the correct form filter. If submission still fails, test the public form and correct the field error that it shows.
