Signed webhooks

This adds one row for each new inquiry: the time, the form, the project and the private link. It uses a short script in your own spreadsheet, and no Google sign-in to makeform.live.

1. Open or create a Google Sheet, then choose Extensions → Apps Script.
2. Delete the sample code, paste the script below and choose Save.
3. Choose Deploy → New deployment. Next to Select type, choose the gear, then Web app.
4. Set Execute as to Me and Who has access to Anyone, then choose Deploy.
5. Choose Authorise access and pick your Google account. Google shows “Google hasn’t verified this app”, because it’s your own script rather than a published app.
6. Choose Advanced, then Go to (your project name), then Allow. The script can only edit this spreadsheet.
7. Copy the Web app URL. It ends with /exec.
8. In makeform.live, open Settings → Integrations → Add an alert, choose Webhook, paste the link and choose Send test and add.
9. A row saying “Test from makeform.live” appears in a sheet called Inquiries. You can delete that row.

/** @OnlyCurrentDoc */
// makeform.live → this spreadsheet: one row per new inquiry.
// It writes the time, form, project and private link. makeform.live sends no answers.
// It logs nothing, so messages and the web app link don't appear in Executions.
const SHEET = "Inquiries";

function doPost(e) {
  let body;
  try {
    body = JSON.parse(e.postData.contents);
  } catch (error) {
    return reply("ignored");
  }
  const data = body.data || {};
  const inquiry = data.inquiry || {};
  const test = body.type === "alert.test";
  if (!test && body.type !== "inquiry.received") return reply("ignored");
  if (!test && !String(inquiry.url).startsWith("https://makeform.live/forms/")) {
    return reply("ignored");
  }
  const cache = CacheService.getScriptCache();
  if (!test && cache.get(inquiry.id)) return reply("ok"); // a retry we already saved
  const book = SpreadsheetApp.getActiveSpreadsheet();
  const sheet = book.getSheetByName(SHEET) || book.insertSheet(SHEET);
  if (sheet.getLastRow() === 0) {
    sheet.appendRow(["Received (UTC)", "Form", "Project", "Inquiry link"]);
  }
  sheet.appendRow([
    text(inquiry.receivedAt || body.timestamp),
    text(test ? "Test from makeform.live" : data.form && data.form.name),
    text(data.project ? data.project.name : ""),
    text(test ? "" : inquiry.url),
  ]);
  if (!test) cache.put(inquiry.id, "1", 21600);
  return reply("ok");
}

// Text that starts like a formula is saved as plain text.
function text(value) {
  const s = value == null ? "" : String(value);
  return /^[=+\-@]/.test(s) ? "'" + s : s;
}

function reply(message) {
  return ContentService.createTextOutput(message);
}

Anyone who can open the spreadsheet sees the links. Opening one still needs a makeform.live sign-in.

1. In Make.com, create a scenario and add the Webhooks module Custom webhook.
2. Choose Add, name the webhook “makeform.live” and choose Save. Make.com shows the webhook address and starts listening.
3. Copy the address. In makeform.live, add a Webhook alert, paste it and choose Send test and add. Make.com shows that it has determined the data structure.
4. Add the next steps, for example Google Sheets → Add a row or Notion → Create a page, and map data.form.name, data.inquiry.receivedAt and data.inquiry.url.
5. Save the scenario and turn it on.

• Each run uses some of your Make.com plan’s monthly credits.
• To bring in the visitor’s answers, add an HTTP step that calls data.inquiry.apiUrl (see Read the answers).

1. In your base, create a table called Inquiries with the fields Received, Form, Project and Link.
2. Open Automations and create an automation. Choose the trigger When webhook received and copy its link.
3. In makeform.live, add a Webhook alert, paste the link and choose Send test and add.
4. In Airtable, choose Test trigger. Airtable shows our test message.
5. Add the action Create record in Inquiries, and map Received to data.inquiry.receivedAt, Form to data.form.name, Project to data.project.name and Link to data.inquiry.url.
6. Turn the automation on. Delete any test record.

Use n8n’s Webhook node (its production URL), or any public https:// endpoint. Check the signature as shown below.