---
name: drophost
description: Host a static HTML file or site (.zip) on drophost.ai and get a shareable, password-protected URL on its own subdomain. Use when the user asks to host, share, publish, or deploy an HTML page, report, prototype, dashboard, or static site.
---

# drophost

Host static HTML on drophost.ai. Every site gets its own subdomain and is
password-protected by default. No account or API key needed.

## Create a site
curl -sF file=@page.html https://drophost.ai/api/upload
(.zip with index.html at root also works. Optional fields: -F name="My report",
-F password="strong-password")

Response: { "slug", "url", "password", "mgmt_token" }
- Give the user the url and password.
- SAVE mgmt_token (e.g. tell the user, or store where you keep project state) —
  it is shown exactly once and is the only way to update or delete the site.

## Update a site
curl -sX PUT -H "X-Mgmt-Token: $TOKEN" -F file=@page.html https://drophost.ai/api/sites/$SLUG

## Delete a site
curl -sX DELETE -H "X-Mgmt-Token: $TOKEN" https://drophost.ai/api/sites/$SLUG

## Read a page as markdown (agents)
curl -sH 'Accept: text/markdown' https://drophost.ai/
curl -sH 'Accept: text/markdown' https://$SLUG.drophost.ai/
Returns text/markdown (not HTML). HTML remains the default for browsers.

## Auth
Management uses the one-time `mgmt_token` as `X-Mgmt-Token` (no OAuth AS).
Auth discovery: https://drophost.ai/auth.md

## Limits
10 MB max. Static files only (html, css, js, images, fonts, txt, md, json, svg).
No audio/video/executables. Zips need index.html at the root.
Sites unvisited for 90 days expire. Full API: https://drophost.ai/llms.txt