Platphorm Files

Purpose: AI-first file storage for the Platphorm News network.
Canonical URL: https://files.platphormnews.com
API docs: https://files.platphormnews.com/api/docs
OpenAPI: https://files.platphormnews.com/openapi.yaml
MCP metadata: https://files.platphormnews.com/api/mcp

Core capabilities:
- Upload and organize photos, images, archives, documents, and arbitrary files.
- Store SHA-256 hashes, block duplicate content by default, and record file history.
- Ingest trusted URLs and bounded URL batches with SSRF protection.
- Expose protected REST and MCP operations using PLATPHORM_API_KEY.
- Allow bounded anonymous uploads and folder creation only under bbs/public/.

Protected actions require Authorization: Bearer $PLATPHORM_API_KEY or X-PlatPhorm-API-Key.

Platform boundary:
Web dashboard, public-safe discovery, browser-based operations, trusted-domain discovery, standard route compliance, Vercel metadata capture, trace inspection, and agentic workflow discovery are intentionally supported for public read-only debugging and operator workflows. Mutating, administrative, ingestion, replay, fork, remediation, deployment, sync, test-triggering, reporting, and write actions require PLATPHORM_API_KEY.

Protected REST routes:
- /api/v1/list
- /api/v1/stats
- /api/v1/upload
- /api/v1/ingest-url
- /api/v1/bulk-ingest
- /api/v1/folder
- /api/v1/move
- /api/v1/delete
- /api/v1/metadata
- /api/v1/history
- /api/files/raw

Public discovery routes:
- /
- /docs
- /api/health
- /api/v1/health
- /api/docs
- /api/v1
- /public/bbs
- /api/v1/public/bbs
- /api/v1/public/bbs/upload
- /api/v1/public/bbs/folder
- /api/mcp
- /openapi.yaml
- /llms.txt
- /llms-full.txt
- /llms-index.json
- /robots.txt
- /sitemap.xml
- /sitemap-index.xml
- /rss.xml
- /feed.xml
- /manifest.webmanifest
- /.well-known/mcp.json
- /.well-known/agents.json
- /.well-known/ai-plugin.json
- /.well-known/security.txt
- /.well-known/trust.json

Known limitations:
- File content under bbs/public/ is publicly readable; all other content and metadata require PLATPHORM_API_KEY.
- External URL ingest requires PLATPHORM_FILES_ALLOWED_URL_HOSTS.
- Blob sidecar metadata is the current durable index; database/search fanout is a future scale-out task.