Secure Links API · puny.io

Secure, expiring links and self-destructing capsules.

Puny gives applications a simple way to share sensitive information with passwords, allowlists, expiry rules, and one-time capsules — without inventing a secure-sharing system from scratch.

Bearer auth · Sandbox + live · Official SDKs
quick-start.sh
# create a secure expiring link
curl https://api.puny.io/v1/links \
 -d '{"url":"https://example.com/report",
  "expires_in":"24h","password":"••••••"}'

→ short_url · expires_at · access policy
01 · What you can build

One focused API, designed to do its job well.

EXPIRY

Expiring links

Create links that automatically stop working after a defined window.

PASSWORD

Password protection

Require a password before the destination can be opened.

ALLOWLIST

Allowlisted access

Limit access to explicitly permitted recipients.

CAPSULES

Self-destructing capsules

Store sensitive information that disappears after a single successful reveal.

02 · Quick start

From key to first successful request.

01

Grab your keys

Use sandbox credentials while you build and live credentials when you ship.

02

Install the SDK

Use the maintained library for your language or call the REST API directly.

03

Make the request

Send the minimal payload, inspect the response and wire the result into your flow.

03 · Core endpoints

The routes you'll use first.

Start with the core surface, then move into the full API reference when you need every parameter and event.

POST/v1/links
GET/v1/links/:id
DELETE/v1/links/:id
POST/v1/capsules
GET/v1/capsules/:id
START BUILDING

Create secure links without building the security layer yourself.

Use the sandbox end to end, then switch to live keys when you're ready to ship.

Get API keys →