Create lead form
Create an instant (lead) form on the Page.
Spends nothing until an ad opens it. A published form cannot be edited; a change is a new form. Send an Idempotency-Key: a retry would otherwise create a second form.
Requires a key with write scope or higher.
MCP: meta_create_lead_form.
bearerAuthAuthorizationBearer <token>An API key from Settings → API keys, sent as Authorization: Bearer rsk_….
Authorization has two independent axes.
The scope is ranked — a key satisfies any requirement at or below its own tier:
read— every GET.write— launch ads PAUSED, sync, pull history, edit thresholds, Values, briefs, tests, swipes and research.admin— everythingwritecan. No operation requires more thanwritetoday.
There is no approve scope. It was a rung once; it is not one now, and a key requested with it is rejected.
The approval grant (can_approve) is a separate boolean, not a rung. Changing spend on Meta — activating a launch, pausing or resuming ads, retargeting an ad set, or rebuilding a launch's live creative — needs write and the grant. Keeping them on separate axes is what makes the review gate a control rather than a convention: a key that may propose is not automatically a key that may approve its own proposal.
A key reaches the one workspace — one Meta ad account — it was minted in, and stops working when the operator who minted it leaves the workspace. The same key authenticates the MCP endpoint (/api/mcp) for a headless agent, with the same scope and grant.
Idempotency-Key?stringAny unique string up to 256 characters. A retry with the same key and body replays the first success (Idempotency-Replay: true) instead of doing the work twice; the same key with a different body is refused.
length <= 256application/json- body
name*string1 <= length <= 200locale?stringMeta's form locale, e.g. EN_US, PL_PL. Default: the Page's.
^[A-Za-z]{2}_[A-Za-z]{2}$questions*array<>1 <= items <= 15privacy_policy*intro?The intro screen.
thank_you?The screen after submit.
higher_intent?booleantruepage_id?stringOmit for the workspace's default Page.
^\d+$Created. The body is the tool's own result — the same payload the MCP tool returns.
application/json- response
curl -X POST 'https://winandscale.com/api/v1/lead-forms' \ -H 'Content-Type: application/json' \ -d '{ "name": "string", "questions": [ { "type": "FULL_NAME" } ], "privacy_policy": { "url": "http://example.com" }}'{}