Security — entry 006 of 30
dead-drop
dead-drop is a minimal, self-hostable API for sharing ephemeral secrets: the client encrypts the payload before it ever reaches the server, so the backend only ever stores ciphertext it cannot read, and each secret can be set to self-destruct after a single view or a time limit. It needs no account or API key — requests are simply rate-limited per IP — and returns plain JSON over a small REST surface. The design mirrors the classic one-time-secret pattern used for sharing passwords or tokens without leaving a permanent copy anywhere.
AuthenticationNone requiredCall it straight away — no key, no signup.
HTTPSSupportedTraffic is encrypted in transit.
CORSEnabledCallable directly from browser JavaScript.
PricingFreeNo paid tier — free for the documented use case.
FormatsJSONResponses can be requested as JSON.
GreatAPIs Score
Score74
Authentication25/25No authentication required
Pricing20/20Free to use
Docs0/20No docs or spec available
Formats9/15Single response format
Freshness20/20Verified within 6 months
Embed this badge
<a href="https://greatapis.com/api/dead-drop/"><img src="https://greatapis.com/badge/dead-drop.svg" alt="Scored 74 on greatapis.com"></a>Auth quickstart
- No key needed — call it now.
Stored keyNo key stored
Your key is stored only in this browser (localStorage) and sent directly to the API — never to greatapis.