curl --request PATCH \
  --url https://{your-subdomain}.neetoform.com/api/external/v2/forms/{form_id}/access_control \
  --header 'Content-Type: application/json' \
  --header 'X-Api-Key: <x-api-key>' \
  --data '
{
  "access_control": {
    "auth": "basic",
    "password": "<string>",
    "allowed_keywords": [
      "@example.com"
    ]
  }
}
'

const options = {
  method: 'PATCH',
  headers: {'X-Api-Key': '<x-api-key>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    access_control: {auth: 'basic', password: '<string>', allowed_keywords: ['@example.com']}
  })
};

fetch('https://{your-subdomain}.neetoform.com/api/external/v2/forms/{form_id}/access_control', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://{your-subdomain}.neetoform.com/api/external/v2/forms/{form_id}/access_control"

payload = { "access_control": {
        "auth": "basic",
        "password": "<string>",
        "allowed_keywords": ["@example.com"]
    } }
headers = {
    "X-Api-Key": "<x-api-key>",
    "Content-Type": "application/json"
}

response = requests.patch(url, json=payload, headers=headers)

print(response.text)

{
  "access_control": {
    "auth": "basic",
    "has_password": true,
    "allowed_keywords": [],
    "invitations_count": 0
  }
}

{
  "error": "<string>"
}

{
  "error": "Form does not exist."
}

{
  "error": "Password is too short (minimum is 4 characters)"
}