monday.com App · v1.0.0 · Submitted for review
Form to Edit
Shareable forms that UPDATE existing monday items — not just create new ones.
- Update existing items
- Signed links
- No seat required
- Audit trail
The gap it closes
monday's native WorkForms can only ever create a new item. They cannot update one that already exists — so the moment you want a client to confirm their details, a contractor to update a job status, or a field tech to log a reading against a record you already have, the form is the wrong tool.
The community request for this has been open since January 2020, has 165+ replies, and is the most-requested monday.com feature in history. The 2025 “Edit Form Responses” release is Enterprise-only, and only covers items that same form created.
Form to Edit closes that gap without giving anyone a monday seat.
How it works
Three steps, then it runs itself.
- 01
Choose exactly which columns a form may touch
Pick the columns from the board. Anything you do not pick literally cannot be written, no matter what the recipient sends — the allow-list is signed into the link itself, not checked in the browser.
- 02
Generate a link for any item
One click per item. Set an optional expiry, and mark it single-use if the answer should only ever be given once.
- 03
They fill it in; the item updates in place
The recipient sees the item’s current values already populated, edits what they need, and submits. The item is updated, and an update is posted to its timeline naming exactly which fields changed.
How it behaves
The decisions that matter.
-
The link is the credential, so it is signed
Each link is an HMAC-SHA256 over the account, board, item, sorted column allow-list and expiry. Changing any part of the URL invalidates it — you cannot point a link at a different item by editing it.
-
A crafted request cannot widen its own scope
On submit, the editable-column list is read from the signed token and never from the request body. Columns outside it are dropped and logged, not written.
-
Every change is on the record
Successful submissions post an update to the item naming the fields that changed, so a board owner can always see that an external edit happened.
-
Deliberately read-only where it cannot be safe
People and Timeline columns are rendered read-only rather than guessed at. Writing a malformed value into someone’s board is worse than not offering the field.
Pricing
Free tier that actually works.
Billed per account through monday.com's built-in monetization — not per seat. The free tier is deliberately functional so the app can prove itself on a real board before you pay for it. Trials get full Pro.
Free
$0
Basic
$19/mo
Standard
$39/mo
Pro
$79/mo
Documentation & data handling
Everything it touches, stated plainly.
Installing & getting started
- Install Form to Edit into your monday.com account and approve the permissions listed below.
- Open the board you want it on and add the app’s Board View / Public form page.
- Follow the three steps above. The free tier covers 1 form — fully functional, on one board, so you can prove it works before paying.
- Stuck? Email [email protected] — two business days response.
Permissions, and why each one
me:read- Identify the installing account so links can be bound to it.
boards:read- Read the board’s columns to build the form, and the item’s current values to pre-fill it.
boards:write- Apply the submitted changes to the item — the core function of the app.
updates:write- Post the audit note to the item’s timeline after a successful submission.
What is stored, and where
- Form definitions (which columns a form may edit, expiry, single-use flag) are stored in monday’s own app storage, inside your account.
- No board data, item values or personal information is copied to any third-party server. Values are read from monday and written back to monday within the request.
- The app runs entirely on monday code — monday.com’s own infrastructure. There is no external database.
- Public form pages are served with noindex, nofollow and Cache-Control: no-store, and are rate-limited per IP.
Technical detail
- Version
- 1.0.0
- Hosting
- monday code (hosted on monday.com infrastructure)
- Runtime
- Node.js 18
- Authentication
- OAuth 2.0 + per-request JWT verification
- monday surfaces
- Board View, Public form page
- App ID
11809979- Support
- [email protected]
- Support SLA
- Two business days
- Publisher
- Builds By Luke, Canada
Questions people ask.
Does the person filling it in need a monday.com seat?
No. That is the point. They receive a link, see only the fields you allowed, and never enter monday.
Can they see the rest of the board?
No. A link is scoped to one item and the columns you chose. Nothing else is readable through it.
What happens if a link leaks?
Set an expiry, or mark forms single-use. You can also delete the form, which invalidates every link issued from it immediately.
What if the item is moved to another board?
The link stops working. The board is signed into the token, so a moved item is refused rather than written to unexpectedly.
Which column types can it edit?
Text, long text, numbers, status, dropdown, date, checkbox, email, phone, link and rating. People and timeline are shown read-only.
Form to Edit is on its way.
It is built and running — currently going through monday.com’s marketplace review. Want a look before it lands?