PlainMote

English | 简体中文

PlainMote keeps and shares configuration files, logs, notes and other files. Every save keeps a version; every recipient or machine gets a share link of its own, with its own expiry and use limit, revocable on its own, and every access through it is recorded. Besides the web, it works from a terminal, an API or an AI app.

Reference deployment: plainmote.link

Features

• Quick share: no account needed. Paste text or drop a file on the home page and get a link that lasts from 10 minutes to 30 days; curl works too. A quick share made while signed in appears under My resources and can be kept as an ordinary resource before it expires.
• Share links: one resource can have many links, each with its own expiry and use limit, each revocable on its own. Updating the content keeps every address. Links answer with ETag and 304, which suits machines polling for a config; opened in a browser, images, audio and video are shown in place.
• Version history: each change to the content keeps the version it replaced (up to 10 per resource, for 30 days), to compare, restore or save as a new resource. A save made against an outdated version is refused as a conflict instead of overwriting.
• Access history: every access through a link is recorded with its time, result, source IP and client, visible only to the owner and kept for 30 days by default.
• Tags: label resources with text tags such as tmp or surge, and filter the list by them.
• Editor: CodeMirror 6 with highlighting for common config formats and logs; it recognises UTF-8, GB18030, Shift_JIS and other encodings and saves in the file's own encoding and line endings.
• End-to-end encryption (optional): with a master password, a resource or a quick share can be encrypted in the browser before upload; the service keeps only ciphertext.
• Command line and MCP: the plainmote command line views, edits and uploads resources; AI apps such as Claude, ChatGPT and Cursor read and write them through /mcp once authorized.
• Interface: English, Simplified Chinese, Traditional Chinese, Japanese, French and German, in light and dark themes.

Command line

curl -fsSL https://plainmote.link/cli/en | sh        # macOS, Linux
irm https://plainmote.link/cli/en.ps1 | iex          # Windows PowerShell

The install script verifies the build's SHA-256 and installs it for the current user, without administrator rights; after the service is upgraded, run it again to update. /cli/en installs a command line that speaks English, /cli/zh one that speaks Chinese.

plainmote login                               # confirm the sign-in in a browser
plainmote ls nginx
plainmote edit nginx.conf                     # opens your editor; closing it saves a new version
plainmote cat nginx.conf | grep listen
tail -n 200 app.log | plainmote push - --name app.log
plainmote push ./nginx.conf --to nginx.conf
plainmote push ./note.md --tag tmp            # create a resource with a tag
plainmote ls --tag tmp
plainmote share ./app.log --ttl 1d            # make a quick share; prints only its link
plainmote push ./prod.env --encrypt           # create an end-to-end encrypted resource

• A resource is named by its ID, an ID prefix of at least six characters, its name or its filename; when several match, the candidates are listed.
• If a resource is saved elsewhere while you edit it, the command line shows the difference and lets you save over it, edit again on the newer version or keep your file.
• Encrypted resources ask for the master password, or read it from PLAINMOTE_MASTER_PASSWORD.
• plainmote help lists every command and setting. The API it uses is described in Command line API.

Sharing with curl

tail -n 200 app.log | curl -F 'content=<-' https://plainmote.link/paste
curl --data-binary @app.log 'https://plainmote.link/paste?ttl=1d&filename=app.log'
curl https://plainmote.link/paste    # prints usage

ttl is 10m, 1h, 1d, 7d or 30d. The response body is the share link on one line, ready for a pipe or $(...).

Security and privacy

• Links are credentials: tokens are 256-bit random values; the database keeps only their digest and an encrypted copy. Share addresses are kept out of search engines and cannot be embedded by other sites.
• No web hosting: types a browser may execute, such as HTML, scripts and SVG, are never delivered as themselves; pages run only the script files the site serves.
• Tokens and authorizations: command line tokens and MCP authorizations are stored only as digests, cannot delete resources, and can be revoked at any time under Authorized apps in the settings.
• End-to-end encryption: WebCrypto in the browser (the Go standard library in the command line), AES-256-GCM; the master password never leaves the device. Decryption needs JavaScript; content is lost if both the master password and the recovery key are; size and access history are not encrypted. A four-character code only keeps out someone who merely sees the link: share sensitive content with the full link and its key. Design and threat model: End-to-end encryption.

Self-hosting

PlainMote is a single stateless Go service. It needs PostgreSQL, S3-compatible object storage (such as Cloudflare R2 or RustFS), and GitHub or Google OAuth for sign-in. The image ghcr.io/xwvike/plainmote is built for amd64 and arm64, and the server needs only compose.yaml and .env:

cp .env.example .env    # fill in the image version, database, object storage, OAuth and keys
docker compose up -d

Environment variables, external services, the public entry point, upgrades and backups are in the deployment guide.

This is the beginning of the README. Read the rest at the original. Read the full README ↗