# Submit Form API has NO Authentication **URL:** \ **Category:** HubSpot Ideas\ **Tags:** api\ **Created:** [September 22, 2021, 3:09pm UTC](https://community.hubspot.com/t/submit-form-api-has-no-authentication/44219 "2021-09-22T15:09:50Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![ShekarC](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/shekarc/32/63860_2.png) [@ShekarC](https://community.hubspot.com/u/ShekarC)\ **Post date:** [September 22, 2021, 3:09pm UTC](https://community.hubspot.com/t/submit-form-api-has-no-authentication/44219/1 "2021-09-22T15:09:50Z")
I’m looking to integrate my Web Form to HubSpot using the API recommended in [https://legacydocs.hubspot.com/docs/methods/forms/submit\_form](https://legacydocs.hubspot.com/docs/methods/forms/submit_form) It works well But the biggest drawback of this API is that there is NO AUTHENTICATION Anyone who knows or intercepts the API call from the Website will find out the Portal ID & Form Guid and can flood my hubspot instance with lot of Form Submissions. Any reason this API is designed this way ? How to secure it ? [https://community.hubspot.com/t5/APIs-Integrations/Submit-Form-API-has-NO-Authentication/m-p/498947#M47071](https://community.hubspot.com/t5/APIs-Integrations/Submit-Form-API-has-NO-Authentication/m-p/498947#M47071) ---
**Author:** ![MVukusic](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/mvukusic/32/75413_2.png) [@MVukusic](https://community.hubspot.com/u/MVukusic)\ **Post date:** [May 19, 2022, 8:37am UTC](https://community.hubspot.com/t/submit-form-api-has-no-authentication/44219/2 "2022-05-19T08:37:22Z")
Noticed this too, luckily, no spam yet. But I think another thing is related to this… form API requests are not logged. We’re just debugging some issues and log would really help, but I guess, since API key is not needed (although used like docs say) it is not logged.