Pastabin

POST or PUT /upload?filename=example.txt
Authorization: Bearer <API key>
Body: raw file bytes or text (curl --data-binary @file or --upload-file file)
Accept: text/plain returns just the download URL; default response is JSON.

GET or HEAD /files/<uuid>/<filename>: public download
DELETE /files/<uuid>: requires the upload API key

Anyone with a download URL can read it. No public listing. Files remain until deleted.