• data.id: Account UUID
• data.name: Profile display name
• data.email: Account email
• data.account_type: Current plan tier
• data.storage.used_bytes: Stored bytes
• data.storage.pending_bytes: Bytes reserved by running uploads
• data.storage.quota_bytes: Max allowed bytes
• data.storage.available_bytes: Remaining bytes
• data.storage.usage_percentage: Storage usage in percent
• data.stats.uploads_count: Total successful uploads
• data.stats.downloads_count: Total successful downloads
• data.stats.views_count: Total view/stream events
• data.stats.shares_count: Total created share links
• data.stats.files_count: Total tracked files in statistics
• data.stats.bandwidth_used_bytes: Total transferred bandwidth in bytes
• data.fair_use.daily_bandwidth_used_bytes: Current fair-use counter for today in bytes
• data.fair_use.full_speed_limit_bytes: Throttle starts when this daily byte limit is reached
• data.fair_use.heavy_throttle_from_bytes: Heavy throttle starts when this daily byte limit is reached
• data.fair_use.moderate_delay_ms: Per-chunk delay in moderate throttle
• data.fair_use.heavy_delay_ms: Per-chunk delay in heavy throttle
• data.fair_use.current_delay_ms: Current per-chunk delay applied now
• data.fair_use.current_state: full_speed|moderate|heavy

• Always owner-bound. No cross-account lookup possible.
• All bandwidth values are bytes.
• Throttle is based on daily fair-use bytes and account tier.
• Moderate throttle starts at daily_bandwidth_used_bytes >= full_speed_limit_bytes; heavy starts at >= heavy_throttle_from_bytes.

curl -X GET "https://cryptfiles.cloud/api/public/v1/account" \
  -H "Authorization: Bearer {token}" \
  -H "Accept: application/json"

• data.items[].id
• data.items[].folder_id, original_file_id, reference_count
• data.items[].status, share_type, is_video, mime_type
• data.items[].file_size, file_size_encrypted, chunk_size, chunk_count
• data.items[].download_count, stream_count
• data.items[].metadata, thumbnail_path, thumbnail_nonce
• data.items[].created_at, updated_at, expires_at
• data.pagination.current_page, last_page, per_page, total

• Defaults to status=available if no status filter is provided.

curl -X GET "https://cryptfiles.cloud/api/public/v1/files?per_page=50" \
  -H "Authorization: Bearer {token}"

• data.id
• data.folder_id, original_file_id, reference_count
• data.status, share_type, is_video, mime_type
• data.file_size, file_size_encrypted, chunk_size, chunk_count
• data.download_count, stream_count
• data.metadata, thumbnail_path, thumbnail_nonce
• data.created_at, updated_at, expires_at

• Returns 404 when file does not belong to token owner.

curl -X GET "https://cryptfiles.cloud/api/public/v1/files/{file_id}" \
  -H "Authorization: Bearer {token}"

• Same file object fields as GET /files/{fileId}

• folder_id must belong to the same owner account.
• No content bytes are modified by this endpoint.
• If no updatable field is provided, endpoint returns 422.

curl -X PATCH "https://cryptfiles.cloud/api/public/v1/files/{file_id}" \
  -H "Authorization: Bearer {token}" \
  -H "Content-Type: application/json" \
  -d '{"share_type":"private"}'

• success
• message

• Returns 404 for non-owner resources.

curl -X DELETE "https://cryptfiles.cloud/api/public/v1/files/{file_id}" \
  -H "Authorization: Bearer {token}"

• data.share_id, share_token, share_url
• data.expires_at, has_password
• message

• Owner-only endpoint.

curl -X POST "https://cryptfiles.cloud/api/public/v1/files/{file_id}/share" \
  -H "Authorization: Bearer {token}" \
  -H "Content-Type: application/json" \
  -d '{"max_downloads":25}'

• data[].id, parent_folder_id, name, display_order
• data[].created_at, updated_at, deleted_at
• data[].file_count, subfolder_count, object_count
• data[].children[] (only when format=tree, recursive same fields)

• Results are always owner-scoped.
• Invalid format values return 422 validation errors.

curl -X GET "https://cryptfiles.cloud/api/public/v1/folders?format=tree" \
  -H "Authorization: Bearer {token}"

• data.folder.id, parent_folder_id, name, display_order
• data.folder.created_at, updated_at, deleted_at
• data.folder.file_count, subfolder_count, object_count
• data.breadcrumbs[] with same folder fields

• 404 for non-owner folders.

curl -X GET "https://cryptfiles.cloud/api/public/v1/folders/{folder_id}" \
  -H "Authorization: Bearer {token}"

• data.id, parent_folder_id, name, display_order
• data.created_at, updated_at, deleted_at
• data.file_count, subfolder_count, object_count

• parent_folder_id must belong to owner account.

curl -X POST "https://cryptfiles.cloud/api/public/v1/folders" \
  -H "Authorization: Bearer {token}" \
  -H "Content-Type: application/json" \
  -d '{"name":"Project Alpha"}'

• data.id, parent_folder_id, name, display_order
• data.created_at, updated_at, deleted_at
• data.file_count, subfolder_count, object_count

• Move target parent must belong to owner account.
• If no updatable field is provided, endpoint returns 422.
• Invalid folder moves (self/descendant) return 422.

curl -X PATCH "https://cryptfiles.cloud/api/public/v1/folders/{folder_id}" \
  -H "Authorization: Bearer {token}" \
  -H "Content-Type: application/json" \
  -d '{"display_order":3}'

• success
• message

• 404 for non-owner folders.

curl -X DELETE "https://cryptfiles.cloud/api/public/v1/folders/{folder_id}" \
  -H "Authorization: Bearer {token}"

• data.query
• data.files[] with same file fields as GET /files/{fileId}
• data.folders[] with same folder fields as GET /folders/{folderId}.data.folder

• Search is always restricted to token owner resources.

curl -X GET "https://cryptfiles.cloud/api/public/v1/search?q=video&type=files&limit=20" \
  -H "Authorization: Bearer {token}"