Skip to main content
POST
Create signed file URLs

Restrictions

Usage

  • Both URLs expire after expires_in seconds (300). Sign again to get fresh URLs.
  • Returned URLs are relative — prepend https://api.flashcat.cloud before use, then follow them with GET /safari/artifact/stream.
  • The signed token is bound to the calling account and the app_key owner’s identity, so a leaked URL does not work for another account or member.

Authorizations

app_key
string
query
required

App key issued from the Flashduty console. Required on every public API call. Keep it secret — it grants the same access as the owning account.

Body

application/json

Request signed download/preview URLs for a presented file.

file_id
string
required

Presented-file ID (pf_ prefix) to sign.

share_token
string

Optional session share-link token. Needed only when the caller reaches the file through a shared session link rather than account membership.

Response

Success

Standard response envelope used by every Flashduty public API. On success data contains the endpoint-specific payload and error is absent. On failure error is present and data is absent. request_id is always present and is also mirrored in the Flashcat-Request-Id response header.

request_id
string
required

Unique ID for this request. Mirrored in the Flashcat-Request-Id header. Include it when reporting issues.

Example:

"01HK8XQE3Z7JM2NTFQ5YJ8P9R4"

error
object

Error payload inside the response envelope. Present only on non-2xx responses.

data
object

Short-lived signed URLs for downloading or previewing a file.