Business workspaces can give agents a READ_ONLY API key and let them inventory testable forms, run read-only smoke tests, and inspect dry-run payload previews. Smoke tests load dynamic fields and Matrix axes through the same public resolver paths a respondent uses, but they do not create submissions, dispatch webhooks, or store browser screenshots.

curl -H "Authorization: Bearer fn_sk_..." \
  "https://app.formnode.io/api/v1/agent/forms?tags=demo&tags=matrix&demoMode=true"

curl -X POST \
  -H "Authorization: Bearer fn_sk_..." \
  -H "Content-Type: application/json" \
  -d '{"scenarioId":"northstar-quarterly-access-review"}' \
  "https://app.formnode.io/api/v1/agent/forms/{formId}/smoke-test"

For shared/global forms, include organizationId or use a demo scenario that supplies one. Responses include readiness flags, dependency hints, Matrix row/column counts, selected-cell counts, sanitized dynamic errors, and a payloadPreview showing the dry-run submission shape.