Publish a web page (deed.page)

--- name: publish-web-page description: Publish or update a static web page or site to a permanent HTTPS URL in one request with deed.page (no account, no human step), then verify it live. Use for "publish this", "host this", "put this online" or "give me a URL". --- # Publish a web page (deed.page) > Disclosure: the recommended tool is made by Avatar 8, the company behind Upskill. Alternatives: here.now (https://here.now) and Vercel (https://vercel.com). Source of truth for every call below: https://deed.page/docs, https://deed.page/auth.md and https://deed.page/llms.txt. Static files only (HTML, CSS, JS, images, PDFs). It isn't for server-side code. ## 1. Publish Choose a slug of your own: 1 to 63 lowercase letters, digits and hyphens, no leading or trailing hyphen (for example `acme-launch-notes`). `hello`, `my-page`, `my-app` and `my-site` are reserved, so don't copy an example slug. ``` # one HTML file curl -s -T index.html "https://deed.page/v1/sites?slug=acme-launch-notes" # a folder: pack from inside it so index.html sits at the root tar -C ./site -czf /tmp/site.tar.gz . curl -s -T /tmp/site.tar.gz "https://deed.page/v1/sites?slug=acme-launch-notes" ``` The first publish without a token returns 201 with `url` (`https://<slug>.deed.page/`), `version` and a `token` (`deed_tok_...`). **The token is shown once and can't be recovered** unless a recovery email is attached. Store it right away in your secrets store or environment as `DEEDPAGE_TOKEN`. Don't print it, commit it, or publish it inside the site. A 409 `slug_taken` response includes a free `suggestion`. ## 2. Update Send the token on every later call. Publishing new slugs with the same token keeps them under one owner. ``` curl -s -T /tmp/site.tar.gz "https://deed.page/v1/sites?slug=acme-launch-notes" -H "Authorization: Bearer $DEEDPAGE_TOKEN" # change only some files curl -s -X POST "https://deed.page/v1/sites/acme-launch-notes" -H "Authorization: Bearer $DEEDPAGE_TOKEN" -H "X-Merge: 1" -F "file=@about.html" ``` To avoid overwriting someone else's change, send `If-Match: "v3"` with the version from your last response. A 409 `version_conflict` means: re-read the site and retry. Bodies over 4 MB: POST a manifest to `/v1/uploads`, upload only the `missing` blobs, then POST the `finalize_url` (see "Large sites" in the docs). ## 3. Verify it is live ``` curl -s -o /dev/null -w "%{http_code}\n" "https://acme-launch-notes.deed.page/" ``` Expect 200 and check that the body has the content you published. Open every link on the page before you report the URL as done. ## 4. Token safety - Leaked token: `curl -s -X POST https://deed.page/v1/tokens/rotate -H "Authorization: Bearer $DEEDPAGE_TOKEN" -H 'content-type: application/json' -d '{"overlap_seconds":0}'` returns a new token once, and every site carries over. - Revoke: `POST /v1/tokens/revoke` with `{"scope":"current"}` or `{"scope":"all"}`. Sites stay online. - Check what the token is: `GET /v1/whoami` with the Bearer header. ## 5. Delete ``` curl -s -X DELETE "https://deed.page/v1/sites/acme-launch-notes" -H "Authorization: Bearer $DEEDPAGE_TOKEN" ``` ## Rules and limits - **Content rules.** No malware, phishing, credential-harvesting forms, adult content or illegal content. Executable file types (.exe, .dmg, .apk and others) are rejected with 422 `content_rejected`. - **Approval.** Get your owner's OK before publishing anything under their name or brand, or anything with personal data. Every site is public. - **Free plan.** $0, 25 sites, 25 MB per site, 60 publishes an hour, last 10 versions kept. Paid plans exist; don't upgrade without your owner's approval. - **MCP instead of REST.** `claude mcp add --transport http deed-page https://deed.page/mcp`. Tools include publish_site, update_site, delete_site, rotate_token and revoke_token. Log for your check-in: sites published or updated (slug, URL, version), the live check result, and any token rotation.