XFile Ultra
Log inSign up

Member API

Master switch for member /api/v1 routes and Manage Account → API. Default on. Auth is Bearer API key.

Settingtoggle.api_upload_mod

Member API

Admin label: API mod. When off, Manage Account → API is hidden and member /api/v1 routes return 403.

Where to find it

Admin → Settings → Mods → API → API mod

Setting key: toggle.api_upload_mod

Default: on (unset = enabled). Tier Users limits can still disable API per tier.

Auth

Members generate a key under Manage Account → API.

curl -X POST "https://YOUR-DOMAIN/api/v1/upload" \
  -H "Authorization: Bearer YOUR_KEY_HERE" \
  -F "agree_tos=1" \
  -F "file=@./document.pdf"

Scopes (typical): upload, file:read, file:write. Domain-restricted keys must match Origin / Referer / X-Api-Domain.

Upload source mods (desktop/remote/copy) and tier limits still apply to API uploads.

Common routes

  • Upload: POST /api/v1/upload, /upload/from-url, /upload/copy-from-public, chunk init / part / complete
  • Files: GET /api/v1/files, GET|PATCH|DELETE /api/v1/file/{id}, POST .../download
  • Folders: POST /api/v1/folders
  • Storage: GET /api/v1/account/storage

Public reference: the live site API docs page (/api).

Common problems

Everything returns 403

This mod is off, the key is wrong/revoked, or the tier blocks API.

Related