Freedom251 › File transfer services
transfer.sh
by transfer.sh
What transfer.sh is
transfer.sh is free, MIT-licensed open-source software for sharing files from the command line. It is available through an API, on Linux, or as self-hosted infrastructure, with no desktop app. Files can be uploaded with curl through HTTP requests, and each upload returns a deletion URL. Operators can connect Amazon S3, Google Drive, Storj, or local filesystem storage. Upload policies can set maximum file size, request rates, download counts, and automatic purge days. Download tracking and API access are supported. The project supplies an official Docker container, including non-root variants. Security-related options include HTTP basic authentication, IP allowlists and blocklists, VirusTotal upload scanning, and configurable ClamAV prescanning. The README demonstrates client-side GPG encryption and advises using server-side AES256 only on a self-hosted server. A repository warning concerns possible IP-filter and HTTP-authentication bypass through spoofed unauthenticated X-Forwarded-For headers. The maintainer recommends hosting your own installation.
Who it suits
It suits command-line users and operators who want to run their own file-sharing server. Teams needing configurable storage, retention, access controls, and upload limits can use its self-hosted deployment.
What it does well
- Free MIT-licensed open-source software
- Uploads work through curl HTTP requests
- Supports S3, Google Drive, Storj, and local storage
- Configurable download counts and deletion periods
- Official Docker container includes non-root variants
What to know first
- No desktop app
- Self-hosting requires operator configuration
- Repository warns of authentication and IP-filter bypass
- Server-side AES256 is advised only when self-hosted
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Self-hosted | MIT-licensed server software; operator configures storage, upload size, rate limits, and purge settings | Free |
As github.com lists them, read 11 Oct 2026. The maker's own page has the final word.
Verdict
transfer.sh provides a configurable command-line file-sharing server with API access and multiple storage backends. Its self-hosted design gives operators control, but the security warning and setup responsibilities require attention.
Facts from transfer.sh's own pages
- Access controls
- Configuration options include HTTP basic authentication and IP allowlists and blocklists. · github.com, 11 Oct 2026
- API access
- Yes · github.com, 23 Sept 2026
- Creators and maintainers
- The repository names Remco Verhoef and Uvis Grinfelds as creators, and Andrea Spacca and Stefan Benten as maintainers. · github.com, 11 Oct 2026
- Deletion
- The server returns a deletion URL that can be used to delete an uploaded file. · github.com, 11 Oct 2026
- Deployment
- The project provides an official Docker container, including variants that run without root privileges. · github.com, 11 Oct 2026
- Desktop app
- No · github.com, 23 Sept 2026
- Download tracking
- Yes · github.com, 23 Sept 2026
- Encryption
- The README shows client-side GPG encryption and warns that server-side AES256 encryption should only be used on a self-hosted server. · github.com, 11 Oct 2026
- File controls
- Uploads can be configured with maximum download counts and maximum days before deletion. · github.com, 11 Oct 2026
- Free plan
- No · github.com, 23 Sept 2026
- Headquarters
- Netherlands · github.com, 19 Oct 2026
- License
- The code is released under the MIT license. · github.com, 11 Oct 2026
- Limits
- Operators can configure the maximum upload size, request rate limit, and automatic purge days. · github.com, 11 Oct 2026
- Purpose
- transfer.sh is described as easy and fast file sharing from the command line. · github.com, 11 Oct 2026
- Security notice
- The repository displays a security warning about IP filter and HTTP authentication bypass via spoofed unauthenticated X-Forwarded-For headers. · github.com, 11 Oct 2026
- Self-hosting
- The repository contains the server needed to create your own instance, and its maintainer recommends hosting your own installation. · github.com, 11 Oct 2026
- Storage integrations
- The server supports Amazon S3, Google Drive, Storj, and local filesystem storage providers. · github.com, 11 Oct 2026
- Uploads
- Files can be uploaded with curl using an HTTP upload request. · github.com, 11 Oct 2026
- Virus scanning
- The server documents a VirusTotal upload option and configurable ClamAV prescanning for uploads. · github.com, 11 Oct 2026
Where transfer.sh stands on Freedom251
- File transfer services#47 of 105