File uploads for your apps. Hosting for your media.

Signed upload URLs

POST /v1/uploads returns a signed URL that is valid for one hour and safe to hand to the browser, which uploads straight to storage.

Large files in parts

Files up to 95 MB upload in one request; larger files get a multipart upload, up to your plan's file size limit.

Server uploads and file management

Upload from your server with PUT /v1/files, and list, get and delete files with the same key.

Public or private files

Public files get a link on cdn.rapidfile.cc. Private files get signed links that expire within seven days.

Signed webhooks

file.uploaded and file.deleted events reach your endpoint with an HMAC-SHA256 signature you can verify.

Scanned before delivery

Uploaded files are scanned for malware, and a file is not delivered from the CDN until its scan has finished.

// Your server: create an upload with the secret key
const res = await fetch("https://api.rapidfile.cc/v1/uploads", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.RAPIDFILE_KEY}`, // rk_live_...
    "Content-Type": "application/json",
  },
  body: JSON.stringify({ name: "avatar.png", size: 48213, type: "image/png" }),
});
return Response.json(await res.json()); // { file, upload }

// The browser: upload straight to storage with sdk.js
import { uploadFile } from "https://api.rapidfile.cc/sdk.js";

const file = await uploadFile(input.files[0], {
  getUpload: "/api/upload", // your endpoint above
  onProgress: (p) => console.log(p.percent),
});
console.log(file.url); // https://cdn.rapidfile.cc/<id>/avatar.png

The browser SDK at api.rapidfile.cc/sdk.js has no dependencies: it asks your endpoint for an upload, sends large files in parts and reports progress.