API Access Keys

API Access Keys are temporary keys with configurable permissions and restrictions to be used in frontend browser interactions with the Filerobot store.

API Access Keys are generated by calling:

POST /key

API Permissions


Request Body (example)

    "data": {
        "upload": {
            "limit_per_min": 5, 
            "max": 6,
            "limit_per_source_ip": 12,
            "dir_scope": [
            "max_file_size": 1048576
        "restrictions" : {
            "whitelist_ip_ranges": [
            "whitelist_countries": [
        "key_validity": {
            "expire_duration": 600
        "listing": {
            "dir_scope": [
            "max": 3
        "permissions": [

All parameters are optional.


upload sets limits on the /upload API

limit_per_minmaximum number of uploads per minute with the keyunlimited
maxmaximum number of uploads allowed with the keyunlimited
limit_per_ip_sourceMaximum number of uploads allowed by IP by the keyunlimited
dir_scopeDirectories where the key is allowed to upload. If you want to allow all subdirectories of /folder, set the value to /folder/*all directories
max_file_sizeMaximum upload size in bytes500 MB


restrictions restricts API calls based on IP address ranges and | or countries

whitelist_ip_rangesAllowed IP ranges for using the key from0.0.0.0
format accepted:,, ...
whitelist_countriesAllowed countries for using the key from.
Provide the code ISO of the country
all countries

The IP are converted to country thanks to GeoLite2


key_validity allows to set validity period of key, for example to match the user's session length in your authenticated application

expiration_durationtime in second before the key expires1200 s (20 minutes)


listing sets limit on all the API except /upload

dir_scopedirectories from where it's allowed to list file. If you want to allow all subdirectories of /folder you need to set the value to /folder/*/* (all directories)
maxmaximum of call to the APIUnlimited


permissions permissions on file operations (list, search, ...) granted to the key.

Permission nameDescription
OBJECTS_FETCHFetch/Access file
FILE_UPLOADUpload file
FILE_RENAMERename file
FILE_MOVEMove file
FILE_META_CHANGECreate file metadata
FILE_DELETEDelete file
DIR_CREATECreate directory
DIR_RENAMERename directory
DIR_MOVMove directory
DIR_META_CHANGECreate directory metadata
DIR_DELETEDelete directory
CONFIG_CHANGEChange storage container configuration
CONFIG_LISTList storage container configuration

Try it out


Copy-paste the cURL request in your Terminal or click on the API Explorer tab to see the API in action.

host: 'https://api.filerobot.com' path: /fusqadtm/key method: POST parameters: {} variables: {} headers: Content-Type: 'application/json; charset=utf-8' X-Filerobot-Key: 19692813e7364ef8ad6a6504d50a12ca body: | { "data": { "permissions": [ "FILE_UPLOAD", "OBJECTS_LIST", "OBJECTS_FETCH" ] } } theme: clouds-midnight curlAPIKey: "" axiosTimeout: 35000 maxContentLength: 150000 render: curl_tab: true


    "status": "success",
    "key": "SASS__v1.05__QOxoDcJ8WauUmcvR3cylWYukGch5Sb0RWYxNXdmthOklAMwITM6U2ZhlgNzQzM2ETN2UTM6Q3c__8bad25726d",
    "hint": "New key created and ready to use",
    "debug": null