Dead-simple file sharing for developers and AI agents.
Upload with one command. Share with a link. No account required.
---
```
$ tf upload model.gguf
✓ Uploaded model.gguf (4.2 GB) → https://transfa.sh/f/xK9mRp
SHA-256 a3f8c2...d91b
Expires in 7 days
```
---
## Why transfa?
Most file-sharing tools are built for humans clicking through UIs. **transfa is built for the terminal** — designed to be called from shell scripts, CI pipelines, and AI agents (Claude, GPT, Cursor, etc.) that need to move files without friction.
- **No signup required** — just install and upload
- **Any format, any size** — up to 100 GB; ML models, archives, binaries, code, media
- **Built for agents** — JSON API, SHA-256 checksums, idempotent uploads
- **Password protection, download limits, TTL** — full control over every link
- **100+ formats detected** — MIME type auto-detection including `.gguf`, `.safetensors`, `.parquet`, `.ipynb`, and more
---
## Install
**Node.js / CLI**
```bash
npm install -g transfa
```
**Python SDK**
```bash
pip install transfa
```
**MCP server** (Claude, Cursor, any MCP-compatible agent)
```bash
npx -y transfa-mcp
```
Or use the raw install script:
```bash
curl -fsSL https://transfa.sh/install | sh
```
---
## Quick start
```bash
# Upload a file (no account needed)
tf upload photo.jpg
# Upload with custom TTL and password
tf upload secret.zip --ttl 24h --password hunter2
# Upload and pipe the URL to clipboard
tf upload bundle.tar.gz | grep url | awk '{print $2}' | pbcopy
# Download a file
tf download https://transfa.sh/f/xK9mRp
# List your uploads
tf list
# Delete an upload
tf delete xK9mRp
```
---
## GitHub Actions
Upload build artifacts, coverage reports, and any CI output straight from your workflow:
```yaml
- uses: colapsis/transfa-action@v1
id: upload
with:
file: ./dist/report.pdf
api-key: ${{ secrets.TRANSFA_API_KEY }}
- run: echo "${{ steps.upload.outputs.agent-link }}" >> $GITHUB_STEP_SUMMARY
```
All five outputs are available after the step: `id`, `agent-link`, `human-link`, `sha256`, `expires-at`.
See [colapsis/transfa-action](https://github.com/colapsis/transfa-action) for the full input reference and more examples (password-protected links, self-hosted instances, single-download limits).
---
## API
transfa is fully REST. Every operation the CLI does, you can do with `curl` or any HTTP client.
### Upload
```bash
curl -X POST https://transfa.sh/api/upload \
-H "Authorization: Bearer $TF_KEY" \
-F "file=@model.gguf" \
-F "ttl=7d"
```
```json
{
"id": "xK9mRp",
"url": "https://transfa.sh/f/xK9mRp",
"download_url": "https://transfa.sh/api/download/xK9mRp",
"filename": "model.gguf",
"bytes": 4512345678,
"sha256": "a3f8c2...d91b",
"expires_at": "2026-05-21T12:00:00.000Z"
}
```
**Upload options** (form fields or headers):
| Field | Header | Description |
|---|---|---|
| `ttl` | `X-Transfa-TTL` | Expiry: `1h`, `24h`, `7d`, `30d` |
| `password` | — | Password-protect the download link |
| `max_downloads` | — | Burn after N downloads |
| `filename` | `X-Transfa-Filename` | Override the stored filename |
### Download
```bash
# Direct download (no auth required)
curl -L https://transfa.sh/api/download/xK9mRp -o model.gguf
# Password-protected
curl -L "https://transfa.sh/api/download/xK9mRp?password=hunter2" -o secret.zip
```
### File info
```bash
curl https://transfa.sh/api/download/info/xK9mRp
```
```json
{
"id": "xK9mRp",
"filename": "model.gguf",
"bytes": 4512345678,
"sha256": "a3f8c2...d91b",
"mime_type": "application/octet-stream",
"download_count": 3,
"has_password": false,
"expires_at": "2026-05-21T12:00:00.000Z",
"active": true
}
```
### List uploads
```bash
curl https://transfa.sh/api/upload \
-H "Authorization: Bearer $TF_KEY"
```
### Delete
```bash
curl -X DELETE https://transfa.sh/api/upload/xK9mRp \
-H "Authorization: Bearer $TF_KEY"
```
---
## Supported formats
Over 100 file types with correct MIME detection — including types not in standard MIME databases:
| Category | Formats |
|---|---|
| **ML models** | `.gguf` `.ggml` `.safetensors` `.onnx` `.pt` `.pth` `.pkl` `.ckpt` `.tflite` `.mlmodel` `.lora` |
| **Data science** | `.parquet` `.arrow` `.feather` `.h5` `.hdf5` `.npz` `.npy` `.lance` `.duckdb` `.ipynb` |
| **Code** | `.py` `.rs` `.go` `.ts` `.kt` `.swift` `.scala` `.cu` `.sol` `.vy` `.elm` `.zig` |
| **Archives** | `.zip` `.tar` `.gz` `.bz2` `.xz` `.7z` `.zst` |
| **3D / Design** | `.glb` `.gltf` `.obj` `.stl` `.usdz` `.blend` `.fig` `.sketch` `.psd` |
| **Media** | `.avif` `.webp` `.heic` `.jxl` `.opus` `.flac` `.webm` `.av1` |
| **Config** | `.toml` `.hcl` `.tf` `.tfvars` `.nix` `.dhall` `.lock` `.env` |
| **Everything else** | `.wasm` `.sqlite` `.db` `.pem` `.crt` `.p12` + all standard types |
Any other format is accepted as `application/octet-stream` — nothing is blocked.
---
## Plans
| | Guest | Free | Pro | Team |
|---|---|---|---|---|
| **Max file size** | 10 MB | 500 MB | 50 GB | 100 GB |
| **Uploads / day** | 5 | 20 | 500 | 5,000 |
| **Max TTL** | 24h | 48h | 30 days | 180 days |
| **Storage** | — | — | Unlimited | Unlimited |
| **Price** | Free | Free | $12/mo | $48/mo |
| **Trial** | — | — | 3-day free trial | 3-day free trial |
[→ See full pricing](https://transfa.sh/pricing)
---
## MCP server (Claude, Cursor, and any MCP-compatible agent)
transfa ships an [MCP server](https://modelcontextprotocol.io) that lets Claude, Cursor, and any MCP-compatible agent upload and share files autonomously — no shell commands, no infrastructure setup.
```bash
npx -y transfa-mcp
```
### Claude Desktop config
Add to `~/Library/Application Support/Claude/claude_desktop_config.json`:
```json
{
"mcpServers": {
"transfa": {
"command": "npx",
"args": ["-y", "transfa-mcp"],
"env": {
"TRANSFA_API_KEY": "your-api-key"
}
}
}
}
```
The API key is optional — the server works in guest mode without one (10 MB / 24h limit).
### Available MCP tools
| Tool | Description |
|---|---|
| `upload` | Upload a file from the local filesystem. Returns `agent_link` (direct URL), `human_link` (share page), and `sha256`. Accepts `run_id`, `step`, `consumer`, `intent` for provenance. |
| `file_info` | Get metadata about an upload — filename, size, SHA-256, expiry, download count, provenance fields. |
| `list_uploads` | List recent uploads (requires API key). |
| `delete_upload` | Delete an upload immediately. |
| `run_artifacts` | Get all files uploaded under a `run_id` — the full provenance manifest for a pipeline run or agent session. |
### Example agent workflow
When Claude has transfa as an MCP tool, it can:
1. Generate a report → call `upload` → get a link → paste the link in the conversation
2. Pass a file to another agent by sharing the `agent_link`
3. Clean up with `delete_upload` when done
---
## Python SDK
```python
import transfa
# Upload
result = transfa.upload("model.pt", ttl="24h", run_id="run-42", artifact=True)
print(result.url, result.sha256)
# Download (SHA-256 verified)
transfa.download(result.id, output="model.pt")
# Provenance manifest for a run
manifest = transfa.run_artifacts("run-42")
# Async
async with transfa.AsyncClient() as client:
result = await client.upload("model.pt")
```
See [python/README.md](python/README.md) for the full API reference.
---
## Use with AI agents (script/subprocess)
transfa is also designed to be called from shell scripts, CI pipelines, and agents that prefer subprocess calls:
```python
import subprocess, json
result = subprocess.run(
["tf", "upload", "output.csv"],
capture_output=True, text=True
)
data = json.loads(result.stdout)
print(data["url"]) # https://transfa.sh/f/xK9mRp
```
Or use the REST API directly — no SDKs, no auth flows, just HTTP.
---
## Self-hosting
```bash
git clone https://github.com/colapsis/transfa.git
cd transfa
cp .env.example .env # fill in your keys
npm install --prefix server
npm install --prefix cli
npm run build --prefix frontend
pm2 start ecosystem.config.cjs
```
**Requirements:** Node.js 18+, nginx (for SSL/proxy)
See [`nginx/transfa.conf`](nginx/transfa.conf) for a production-ready nginx config.
### Environment variables
| Variable | Description |
|---|---|
| `PORT` | Server port (default: `3001`) |
| `BASE_URL` | Public URL e.g. `https://transfa.sh` |
| `STRIPE_SECRET_KEY` | Stripe secret key for billing |
| `STRIPE_WEBHOOK_SECRET` | Stripe webhook signing secret |
| `STRIPE_PRO_PRICE_ID` | Stripe price ID for Pro plan |
| `STRIPE_TEAM_PRICE_ID` | Stripe price ID for Team plan |
---
## Security
Found a vulnerability? Please email **tansfa.sh@gmail.com** or see [SECURITY.md](SECURITY.md).
Do **not** open a public issue for security reports.
---
## License
[MIT](LICENSE) — © 2026 transfa contributors