Checked against official docs

Grok Bot Question Cards and Secure Forms

Checked against xAI's official docs on Oct 28, 2026

When your Bot needs a decision or a detail from you, how does it ask? Usually with a card you tap, or a form you fill in. Here's what xAI's changelog says about them, checked on Oct 28, 2026.

Question cards

Secure Forms for logins and details

Per the changelog, when a Bot needs a login or other form filled, its chat card opens a Secure Form window showing the site's name and icon. Bots ask for logins and other multi-field details on one Secure Form, instead of a card that holds a single value, and Secure Forms fill into the page the Bot has open, including checkout card fields.

Forms that fill themselves in

xAI says forms a Bot asks you to fill in can arrive with known fields filled in, and you can edit them before you submit. Address fields in forms and the Vault suggest streets as you type, and a ZIP code fills in the city and state.

Good habits: our suggestions

These are our ideas, not xAI's.

  1. Read prefilled fields before you submit, especially addresses and amounts.
  2. Check the site name on a Secure Form matches the site you expect.
  3. Save logins you use often in the Vault.
  4. Keep approval rules on for anything that pays or sends.

Keep exploring

Grok Bot directory profile · Official product page

Sources

Where each fact came from

Heads-up: some links here may become affiliate links down the road. Here's how that works. Right now, no affiliate programs are connected.