Disk

What it is

Disk is one Cloudflare Worker in front of R2 (file bytes), D1 (keys,shares, audit), and a React SPA. It's a Dropbox-lite you own outright —and every capability is equally available over a clean API so your agents canuse it as scratch space, artifact storage, or a shared drive.

Features

• 🔑 API-key auth with roles — a ROOT_KEY env secret, revocableroot-equivalent admin keys, and scoped user keys (path prefix,read-only/read-write, per-file upload cap, expiry).
• 🗂️ Virtual root per key — a scoped key sees its prefix as the root andnever perceives or escapes it. Hand an agent a key scoped to agents/zouk/and, to that agent, its world simply starts at /.
• 📤 Any file, any size — drag-and-drop and folder uploads, multipart formulti-GB files, Range downloads, previews (image / video / audio / PDF /markdown / code).
• 👀 Four ways to browse — List, Grid, Tree, and a Finder-styleColumn view that previews the selected file in a pane on the right,making full use of wide screens.
• 🔗 Shares — revocable, expiring public links (/s/<token>), download-counted.
• 📜 Full audit — every request logged (actor, action, path, bytes, status,IP, UA); filterable UI + CSV export for admins.
• 🤖 Agent-ready — REST at /api/v1, OpenAPI 3.1 at /openapi.json, anagent guide at /llms.txt, and an MCP server at POST /mcp — includingadmin tools so an agent can manage keys itself.

Screenshots

Column view — Finder-style Miller columns with a live preview pane on theright; and a Tree view for a bird's-eye look. Different views for differentaudiences.

Virtual root — the same disk, seen through a key scoped to agents/zouk/.No prefix, no other folders, no admin views: its scope is the root.

How to use it

As a person

1. Open disk.zaynjarvis.com.
2. Paste an API key (your ROOT_KEY, or any key you minted) and sign in.
3. Drag files in, preview them, share links, and — as root/admin — mint keysand read the audit log.

As an agent

Mint a key for the agent in the Keys tab (or via the API), then point it atDisk. Give it a scoped key so it can only touch its own corner:

# (admin) mint a scoped read-write key with a 10 MB per-file cap
curl -s -X POST https://disk.zaynjarvis.com/api/v1/keys \
  -H "Authorization: Bearer $ROOT_KEY" -H 'Content-Type: application/json' \
  -d '{"name":"zouk-agent","prefix":"agents/zouk/","permission":"rw","maxUploadBytes":10485760}'
# → returns {"key":"dk_…"}  (shown once)

The agent then speaks scope-relative paths — it never sees agents/zouk/:

export DISK_KEY=dk_...
# upload  (stored at agents/zouk/notes/todo.md, but the agent just says "notes/todo.md")
curl -s -X PUT "https://disk.zaynjarvis.com/api/v1/files/blob?path=notes/todo.md" \
  -H "Authorization: Bearer $DISK_KEY" --data-binary @todo.md
# list its root
curl -s "https://disk.zaynjarvis.com/api/v1/files" -H "Authorization: Bearer $DISK_KEY"
# share a file
curl -s -X POST https://disk.zaynjarvis.com/api/v1/shares \
  -H "Authorization: Bearer $DISK_KEY" -H 'Content-Type: application/json' \
  -d '{"path":"notes/todo.md","ttlSeconds":3600}'

Full curl reference for every operation: /llms.txt.

Over MCP

Connect any MCP client (Claude Code, Claude Desktop, Cursor, …). The agent getsnative tools — disk_list, disk_read, disk_write, disk_delete,disk_move, disk_share, and (for admin keys) disk_key_create /disk_key_list / disk_key_revoke:

{ "mcpServers": { "disk": {
  "type": "http",
  "url": "https://disk.zaynjarvis.com/mcp",
  "headers": { "Authorization": "Bearer dk_..." }
} } }

Hand an agent an admin key and it can administer the whole disk — includingminting and revoking other keys — entirely through MCP.

Stack

Hono on Cloudflare Workers · R2 · D1 · React 19 + Vite + Tailwind v4 · vitest(@cloudflare/vitest-pool-workers). One wrangler deploy ships the API, theMCP server, and the SPA together.

Contributing & deploying

• DEV.md — local setup, the contract-first rule, security-coreinvariants, recipes, and gotchas.
• DEPLOY.md — architecture, provisioned resources, redeploy,migrations, disaster-recovery bootstrap.
• API.md — the binding API contract.

Screenshots above are generated with node scripts/screenshots.mjs against alocal dev server.