List a site's files

GET

/sites/{pageId}/files

The manifest-relative file list for a hosted site — path, size, and content type for every committed file — READ-ONLY investigation tooling. A platform reviewing an abuse report against one of its customers' sites can see everything the site ships without reconstructing it by hand. Listable for kind site AND kind html (a single HTML page has a one-entry manifest); any other kind stores one opaque object with no addressable paths and is refused with 400. Isolation is IDENTICAL to GET /sites/{pageId}: see PageNotFound below. Refused with 403 if the subject is not in good standing (see Forbidden) — this applies to reads as well as writes.

Request

Authorization

API Key

Add parameter in header

x-api-key

Example:

x-api-key: ********************

Bearer Token

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

Path Params

Responses

🟢200OK

application/json

The site's files.

Bodyapplication/json

🟠400Bad Request

🟠401Unauthorized

🟠403Forbidden

🟠404Record Not Found

🟠429

Request Example

Shell

JavaScript

Java

Swift

curl --location 'https://upload.tf/api/v1/sites/a1b2c3d4e5/files' \
--header 'x-api-key: <api-key>'

Response Example

200 - Example 1

{
    "success": true,
    "data": {
        "files": [
            {
                "path": "string",
                "sizeBytes": 0,
                "contentType": "string",
                "isEntry": true
            }
        ],
        "fileCount": 0,
        "totalBytes": 0
    }
}

Modified at 2026-08-25 00:05:47

Delete a site

Read one file's content