# freepastebin.com

Public, no login, no API key, no rate limits.
API contract: https://freepastebin.com/openapi.json
HTML documentation: https://freepastebin.com/docs
Discovery: https://freepastebin.com/sitemap.xml
All APIs allow cross-origin requests. Errors: {"error":{"code":400,"message":"..."}}.
Use POST JSON or application/x-www-form-urlencoded for mutations. GET creation is also supported.
Save delete_token returned by paste/link creation. POST /api/pastes/{id}/delete or /api/links/{id}/delete with {"delete_token":"..."}. Never share deletion tokens.
POST /api/pastes with content, optional title, language, expires_in (seconds; default 2592000; 0 never). Up to 1 MiB UTF-8. GET /raw/{id} or /api/pastes/{id}. DELETE /api/pastes/{id} also accepts Authorization: Bearer <delete_token>. visibility=public (default) leaves the paste indexable. visibility=private returns read_token and a share URL with #read_token=... . Private HTML, raw, and JSON reads require Authorization: Bearer <read_token> or ?read_token=... and return noindex/no-store. Read tokens cannot delete pastes; deletion tokens cannot read private pastes. Content is not end-to-end encrypted and remains in private operational archives.