Zoho Forms
The Zoho Forms connector lets AI agents read form definitions, retrieve and export responses, create new forms, and manage response data. It uses OAuth 2.0 so your credentials are stored encrypted in MCPGate's vault and are never exposed to the AI client.
Required scopes#
MCPGate requests the following OAuth scope when you connect a Zoho Forms account.
| Scope | Purpose |
|---|---|
| ZohoForms.forms.ALL | Full access to forms, fields, and response data |
Tool reference#
The Zoho Forms connector exposes 9 tools. Use the MCP Apps page to enable or disable individual tools per app, and the Guardrails page to add fine-grained rules on top.
| Tool | Category | Description |
|---|---|---|
| zohoforms_list_forms | read | List all forms in a Zoho Forms workspace |
| zohoforms_get_form | read | Get details of a specific Zoho Form by ID |
| zohoforms_list_responses | read | List responses submitted to a Zoho Form |
| zohoforms_get_response | read | Get a specific response by ID from a Zoho Form |
| zohoforms_export_responses | read | Export all responses for a Zoho Form as CSV or JSON |
| zohoforms_list_fields | read | List fields/questions defined in a Zoho Form |
| zohoforms_create_form | write | Create a new Zoho Form |
| zohoforms_update_form | write | Update an existing Zoho Form |
| zohoforms_delete_response | delete | Delete a specific response from a Zoho Form |
Deleting responses is permanent
zohoforms_delete_response permanently removes the response from Zoho Forms. This may affect compliance and audit requirements for forms used in regulated processes such as consent collection or HR intake. Deny this tool unless the agent explicitly manages data retention.Common guardrail recipes#
Read-only access#
Apply the read_only preset to enable the six read tools and deny all write and delete tools. Suitable for data processing agents that extract and analyse form responses without modifying any form definitions or deleting submissions.
Manage responses preset#
Use the manage_responses preset to enable read tools and zohoforms_delete_response, while denying form creation and update. Useful for data hygiene agents that clean up test submissions from live forms.
Full access#
The full_access preset enables all 9 tools. Apply a allow_values guardrail to zohoforms_delete_response to restrict which form IDs the agent may delete responses from.
Troubleshooting#
- Form link name vs form ID — Zoho Forms uses a human-readable link name in URLs and an internal form ID in the API. Use
zohoforms_list_formsto retrieve the correct form ID before calling response tools. - Export format —
zohoforms_export_responsessupports CSV and JSON formats. JSON is recommended for agent processing as it preserves field types. CSV is better for direct import into spreadsheets. - Response pagination —
zohoforms_list_responsesreturns paginated results. For forms with large volumes of responses, the agent should iterate through pages using the provided cursor or page offset parameter.