# File Server LLM Guide

This service exposes a browser UI and a bearer-token API for humans and bots.

Docs: http://nathanielstam.com/api-docs
Capabilities: http://nathanielstam.com/api/capabilities
OpenAPI: http://nathanielstam.com/openapi.json

Authentication
POST /api/auth/token with JSON {"username": "...", "password": "...", "label": "bot"}.
Use the returned token as Authorization: Bearer <token>.

Core endpoints
GET /api/files?path=folder/subfolder
POST /api/files/upload as multipart/form-data with fields path, files, and optional relativePaths[]
GET /api/files/download?path=folder/file.txt
POST /api/folders with JSON {"path": "folder", "name": "new-folder"}
POST /api/files/move with JSON {"source": "old/path", "destination": "new/folder"}
DELETE /api/files with JSON {"path": "folder/file.txt"}
GET /api/shares
POST /api/shares with JSON {"path": "folder/file.txt"}
DELETE /api/shares/<token>
GET /api/public/shares/<token>
GET /api/public/shares/<token>/download?path=subfolder/file.txt

Notes
Downloads always return attachments.
Folder downloads are served as zip archives.
Paths use forward slashes.