PowerShell: use deploy/test-api.ps1 -Token ch_... from your PC.
4. Main endpoints
Method
Path
Auth
Notes
GET
/api/me
API key
Account, plan, billing, uploadAllowed
GET
/api/usage
API key
Storage bytes + cost estimate + egress
GET
/api/files
API key
List files/folders (names may be encrypted)
POST
/api/files
API key
Upload JSON body (paid/staff required)
GET
/api/files/{id}
API key
Download file payload (paid/staff required)
POST
/api/files/{id}/delete
API key
Move to trash
POST
/api/tokens
session/API
Create key {"name":"my-app"}
GET
/api/tokens
API key
List keys (hints only)
DELETE
/api/tokens/{id}
API key
Revoke key
GET
/api/session-status
public
Build / health hint
Private (ZK) browser uploads encrypt client-side. Raw API uploads for Private still require payment/staff access; encrypt on the client if you need ZK via API.
5. Expected test results
200 on /api/me with your username → API key works.
401 → wrong/missing key, or key revoked.
402 on upload/download → unpaid client (pay or set Staff in admin).