mbr.pub

Authenticate requests

Use API keys for integrations and session tokens for dashboard operations.

Getting startedAuthenticationUploadsFilesFoldersExamplesErrors and limits

Authentication methods

Use an API key for integrations that belong to a dashboard account. Existing session tokens continue to work for dashboard operations. Private pages, previews, raw bytes, and downloads require the owner's session or API key; unauthorized private resources return the same 404 as a missing file.

API key
X-API-Key: your-api-key
Session token
Authorization: Bearer your-token
cURL
curl https://mbr.pub/api/user/files -H "X-API-Key: your-api-key"

Create, rotate, or revoke a key in Dashboard → Settings → API. Never ship a key in browser code.

Password-protected resources

Send file passwords with X-File-Password and folder passwords with X-Folder-Password. Delete keys are accepted through the existing Authorization delete-key flow.

PreviousGetting startedNextUploads