API reference

Machine uploads use bearer tokens. Dashboard and device linking require Cloudflare Access.

quick start

init + upload

curl -X POST https://drop.l92-labs.com/api/v1/device/init

curl -X POST https://drop.l92-labs.com/api/v1/artifacts \
  -H "Authorization: Bearer dev_…" \
  -F "file=@screenshot.png"

endpoints

post /api/v1/device/init

Issue or reload the machine token. Response includes dev_….

post /api/v1/artifacts

Multipart upload. Requires Authorization: Bearer dev_….

get /a/:id

Viewer (HTML) or JSON metadata depending on Accept header.

get /r/:id/:file

Raw object from R2.

get /dashboard

Artifact list. Cloudflare Access required.

post /mcp

MCP JSON-RPC endpoint.

get /skill.md

Agent skill markdown — fetch and install to ~/.cursor/skills/agentdrop/SKILL.md.

get /healthz

Liveness check.