Authentication

import { Aside } from ‘@astrojs/starlight/components’;

Write endpoints need a token. Read access to public artifacts doesn’t.

Bearer token

Send your token in the Authorization header:

curl -H "Authorization: Bearer so_your_token_here" \
  https://shareout.site/v1/artifacts

Tokens look like so_…. Keep them secret — anyone with your token can publish as you.

Where to store it

The CLI and example scripts read from ~/.shareout/credentials:

~/.shareout/credentials

{ "token": "so_your_token_here" }

Session cookies (browser)

Requests from a logged-in browser session are also accepted via cookie, set by the Google sign-in flow:

• shareout_session — Google auth
• shareout_access — password / credentials auth

For server-to-server calls, prefer the bearer token.

ShareOut runs behind Cloudflare. Python `requests` can trigger a `1010` block. Build your payload in Python and pipe it to `curl` — see the [Quickstart](/start/quickstart/).

Rate limits

Endpoint	Limit
Publish	60 / hour per user
Data API	1000 / min per artifact
Email	50 / day per user, 10 / day per artifact
CORS proxy	100 / min per artifact

Exceeding a limit returns 429 with code RATE_LIMITED.