What the playground does
The API reference shows each operation’s path, parameters, required scopes, and an example request. Examples are copyable so you can adapt them in your own terminal or code.What it deliberately does not do
This is a deliberate configuration, not a limitation of the documentation tooling.
Why live requests are disabled
- Production safety. Most operations mutate real data. A one-click delete or hard delete in a documentation page is a foot-gun, not a feature.
- Credential safety. These endpoints require a secret key. Sending it from a documentation page means the secret exists in a browser tab and potentially in a proxy.
- CORS. API-key headers are not allowed by CORS, so a browser request would fail preflight anyway.
- No auth proxy. Routing your secret through a documentation proxy moves the trust boundary without a security review.
Safe way to experiment
- Create a dedicated bucket named for experimentation.
- Create a key with
buckets:read,buckets:write,files:read,files:write,folders:read,folders:write. - Restrict that key to the experiment bucket.
- Export credentials as environment variables.
- Run the examples from the reference.
Example: read-only smoke test
403, read the code.
Example: list a bucket’s files
Destructive operations
Delete, hard delete, and version deletion are documented for completeness. Do not run them against a bucket that holds data you need. If you must test them:- Upload a file you can discard.
- Record its
fileId. - Soft delete it and restore it.
- Only then consider a hard delete, on the disposable file.
About the examples
Examples across this site are illustrative. They use placeholder identifiers and omit retries, structured error decoding, and secret management for brevity. They are examples, not official SDKs. There is no official Everabyte SDK documented at this time.Related
Quickstart
A guided first request.
API keys
Create a scoped experiment key.
Conventions
Envelopes and headers.
Errors
Interpreting failures.