PATCH/api/v1/documents/{slug}/settings

Set password and expiry

Changes a document's password or expiry without sending its content. Every field is optional: leave one out to keep it. "read_password": "" removes the password. Send a token as the owner, or the edit secret.

Token optionalOr edit secret10 per minute per IP

Guide: Passwords and expiry

Code samples and Try it

Path parameters

slugstringRequired
The document's address: the part after markdrop.in/.

Headers

X-Edit-Secretstring
The document's edit secret (sk_…), for a document published without an account. See Edit key.

Request body

application/json, required

read_passwordstring
Readers must enter this password before they see the content. Up to 100 characters.
remove_passwordboolean
true removes the password. Default false.
expires_in"never" | "1h" | "1d" | "7d" | "30d" | "custom"
When the document is deleted. custom needs custom_expires_at.
custom_expires_atstring (date-time)
The deletion time, when expires_in is custom. Must be in the future. ISO 8601, for example 2026-11-30T12:00:00Z.

Responses

200OK.
422The request didn't validate. detail lists each problem, with where it is (loc) and why (msg).
429Too many requests from your IP address. Wait the seconds in Retry-After.

200 response: 35 fields (DocumentResponse)

slugstring
The address: markdrop.in/<slug>.
urlstring
The link to share.
folder_patharray of string
titlestring | null
Shown on the page and in link previews.
contentstring
The document's Markdown.
created_atstring (date-time)
ISO 8601, for example 2026-11-30T12:00:00Z.
updated_atstring (date-time)
ISO 8601, for example 2026-11-30T12:00:00Z.
expires_atstring (date-time) | null
ISO 8601, for example 2026-11-30T12:00:00Z.
viewsinteger
Default 0.
is_password_protectedboolean
Default false.
is_ownedboolean
Default false.
is_ownerboolean
Default false.
idstring | null
refstring | null
google_doc_urlstring | null
google_doc_staleboolean
Default false.
vscode_syncedboolean
Default false.
encryptedboolean
Set by clients that encrypt in the browser: content and title are already ciphertext. The server never sees the key. Default false.
kindstring
markdown for a document, artifact for a file. Default "markdown".
mimestring | null
rendererstring | null
type_labelstring | null
size_bytesinteger | null
original_filenamestring | null
artifact_urlstring | null
download_urlstring | null
poster_urlstring | null
mediaobject | null
file_versioninteger | null
workspace_urlstring | null
The address on its workspace's own domain, when it has a live one.
access_levelstring
Who can open it: link (anyone with the link), private (only you and the people you share it with) or workspace (members of its workspace). Default "link".
workspace_idstring | null
canobject | null
What you may do with it: edit, replace, settings, access, rename, delete, share, move, unshare.
read_ticketstring | null
access_epochinteger
Default 0.

const res = await fetch("https://api.markdrop.in/api/v1/documents/k3x9q2m/settings", { method: "PATCH", headers: { Authorization: `Bearer ${process.env.MARKDROP_TOKEN}`, "Content-Type": "application/json", }, body: JSON.stringify({ "expires_in": "7d" }), }); const data = await res.json();

import os import requests r = requests.patch( "https://api.markdrop.in/api/v1/documents/k3x9q2m/settings", headers={"Authorization": f"Bearer {os.environ['MARKDROP_TOKEN']}"}, json={"expires_in": "7d"}, ) r.raise_for_status() print(r.json())