{"name":"koza api","version":"v1","base_url":"https://koza.click/api/v1","description":"Short links and direct file lines over plain HTTP. No keys, no tokens — be nice.","docs":"https://koza.click/docs","endpoints":{"shortener":{"POST /shorten":"create a short link — { url, slug?, password? }","GET /links":"list every link on this server","GET /links/{slug}":"look up one link, clicks included","POST /links/{slug}/hit":"count a click","POST /links/{slug}/unlock":"trade a password for the destination url","DELETE /links/{slug}":"burn a link (x-koza-key when admin key is set)"},"box":{"POST /box/rooms":"open a direct line — { password?, files? } → { room, sender_token }","GET /box/rooms/{code}":"inspect a line: staged files, lock state, expiry","DELETE /box/rooms/{code}":"close the line early","GET /turn":"short-lived turn credentials for the webrtc handshake","WS /signal":"p2p handshake relay — see the protocol at the top of server.js"}},"notes":["single json file storage — data survives restarts","rooms expire after one hour","passwords are salted scrypt, never stored in plain text","delete endpoints honor x-koza-key when KOZA_ADMIN_KEY is set"]}