smallapis

Documentation

Everything is plain HTTP. Send a multipart upload, a JSON body with a url, or a base64 payload — whichever suits the caller.

Authentication

Send your key in the X-API-Key header. Authorization: Bearer <key> works too. With no key at all you get the demo quota, which is enough to evaluate every endpoint.

curl -H "X-API-Key: $SMALLAPIS_KEY" https://173-249-18-142.sslip.io/v1/me

Input

Any endpoint that takes a file accepts three shapes:

Shape	How	When to use it
Multipart	`-F "file=@photo.jpg"`	You already hold the bytes.
Remote URL	`{"url": "https://…"}`	The file is already on the web. We fetch it.
Base64	`{"base64": "…"}`	You are calling from a place where multipart is awkward.

Remote fetches are restricted to public addresses: private ranges, loopback and link-local are refused, so the API cannot be used to probe an internal network.

Quotas and limits

Plan	Calls	Max upload
Demo (no key)	25 / day / IP	5 MB
Basic (free key)	200 / month	10 MB
Pro	20,000 / month	50 MB
Ultra	100,000 / month	100 MB
Mega	500,000 / month	250 MB

Every response carries X-Quota-Limit and X-Quota-Remaining. A failed call is never counted.

Errors

Errors are always JSON, always with a stable error code and a sentence a human can act on.

{
  "ok": false,
  "error": "quota_exceeded",
  "message": "Plan \"Basic\" allows 200 calls per month.",
  "used": 200,
  "limit": 200,
  "upgrade": "https://173-249-18-142.sslip.io/pricing"
}