TraceNone API

Create an encrypted secret and get a shareable link.

Body (JSON)

• secret (string, required) — plaintext to encrypt
• label (string) — creator-facing label (not encrypted into the payload)
• password (string, Pro+) — recipient passphrase
• maxViews (integer) — 1 up to your plan max
• expiry (ISO-8601) or expiresIn (seconds)
• domainId or domain (Pro+) — verified custom domain on your account

curl -X POST https://tracenone.app/api/v1/secrets \
  -H "Authorization: Bearer tn_…" \
  -H "Content-Type: application/json" \
  -d '{
    "secret": "super-secret-value",
    "label": "Staging DB",
    "maxViews": 1,
    "expiresIn": 86400,
    "domain": "secrets.yourco.com"
  }'

Response 201

{
  "id": "clx…",
  "label": "Staging DB",
  "url": "https://…/secret/clx…#unlockKey=…",
  "short_url": "https://…/s/xK9m…#unlockKey=…",
  "unlock_key": "…",
  "max_views": 1,
  "views_remaining": 1,
  "expires_at": "2026-07-17T12:00:00.000Z",
  "password_protected": false,
  "domain": "secrets.yourco.com"
}

The unlock key lives in the URL #fragment and is never stored with the ciphertext. Store short_url securely — it is only returned on create.

List secrets for your account. Defaults to active only.

Query

• status — active (default) or all
• page — default 1
• limit — default 20, max 100

Active = not revoked, not expired, and has views remaining. Never returns plaintext or unlock keys.

curl "https://tracenone.app/api/v1/secrets?status=active&limit=20" \
  -H "Authorization: Bearer tn_…"

Fetch metadata for a single secret you own.

curl "https://tracenone.app/api/v1/secrets/clx…" \
  -H "Authorization: Bearer tn_…"

Revoke a secret immediately (Pro+). Cannot be undone.

curl -X DELETE "https://tracenone.app/api/v1/secrets/clx…" \
  -H "Authorization: Bearer tn_…"

Free plans cannot revoke via API or dashboard. Upgrade to Pro to enable revoke.