The same cleaner, for your systems.

Unlike everything else on this site, a file sent to the API leaves your device. It is cleaned on Cloudflare's network for the length of one request: in memory up to 25 MB; above that, written to temporary R2 storage for that request and deleted as soon as the reply is sent (a one-day rule catches a dropped connection). Nothing about the file is logged; only a count of files for your quota is kept.

If a file must never leave your own servers, run the same API yourself: it is one fetch handler in the open-source repository and runs on Node, Deno, Bun or Cloudflare Workers.

1. Sign in with your email address. No password.
2. On your account page, create a key. It is shown once.
3. Call the API with the key as a bearer token.

curl -H "Authorization: Bearer $FILESANITY_KEY" \
  -F file=@photo.jpg \
  "https://filesanity.com/api/v1/clean" -o photo-clean.jpg -D -

Files over 25 MB go as the raw body with X-Filename, not as a multipart form: curl --data-binary @scan.pdf -H "X-Filename: scan.pdf". JPEG and PDF files are read whole, so the API takes them up to 50 MB; the other formats go up to your plan's size.

All paths are under https://filesanity.com/api/v1. Errors are JSON with an error field: 401 for a missing or revoked key, 402 when the month's files are used, 411 when the request has no Content-Length (chunked uploads are not taken), 413 for a file over your plan's size, 415 for a format FileSanity does not read.

The public key is at https://filesanity.com/api/report-key. Anyone holding the clean file, the report and the signature can check that this file came out of FileSanity on that date with those fields removed, without trusting the person who sent it.

// Node 20+
const res = await fetch('https://filesanity.com/api/report-key')
const key = await crypto.subtle.importKey(
  'jwk', await res.json(), { name: 'Ed25519' }, false, ['verify'])
const report = Buffer.from(reportHeader, 'base64')
const sig = Buffer.from(signatureHeader, 'base64')
const ok = await crypto.subtle.verify('Ed25519', key, sig, report)

The count resets on the first of each month, UTC. Larger files clean in the browser, where we set no size limit.