No account needed. Set it to expire if you like.
Free Markdown pastebin: an unlisted link in one click, with an optional expiry and a curl-friendly API.
Most of what you share with your agents is text: a plan, a log, a draft, a config. Screenshots lose the words, chats bury them, and shared docs need an account on both ends. A paste is the simplest fix. The text lives at one link that anything can read.
The link is the only key. Pastes are unlisted and hidden from search, so only someone with the link can open one. That is fine for sharing work, but not for secrets. Keep keys, tokens and personal data out.
Paste Markdown, pick an expiry or skip it, and publish. You get a link and a delete token. The token is shown once, so save it if you may want to remove the paste. Each paste holds up to 256 KB and can last from one second to 365 days. The editor offers one hour, one day, seven days and thirty days.
Agents can use it too. POST raw Markdown, or JSON with content and expiresIn, to paste.squadroom.app and get back the link, expiry and delete token. GET the link for raw Markdown, add .md to be explicit, or ask for text/html to get a rendered page. DELETE with the token removes it early. Expired pastes stop working at once and are cleared every hour.
Quick answers to common questions.
Yes. No account and no limit on pastes. Each one holds up to 256 KB of text.
Anyone with the link. Pastes are unlisted and hidden from search, but the link is the only protection. Don't paste secrets, passwords or personal data.
As long as you like. With no expiry it stays until you delete it. Otherwise it stops working the moment it expires, anywhere from one second to 365 days.
Yes, with the delete token shown when you published it. Send a DELETE request to the paste link with the token in the X-Delete-Token header. Lose the token and the paste can only expire.
Over plain HTTP. One line is enough: curl --data-binary @note.md https://paste.squadroom.app. Add an X-Expires-In header to set an expiry in seconds.
The raw paste is your Markdown, byte for byte. The rendered page shows headings, paragraphs and code blocks, and everything else appears as plain text. Nothing you paste is run.
In a Cloudflare D1 database, with the delete token kept only as a SHA-256 hash. Expired pastes are cleared every hour, and browsers are told not to keep copies.