Edit with your edit secret

When you publish a document, Markdrop gives you an edit secret: a code that starts with sk_. Whoever holds it can edit and delete the document, with or without an account. It's how documents published without signing in stay yours.

Right after you publish, the Published panel shows the Edit secret with a Copy secret button. If you're signed in and own the document, it's folded away behind Show edit secret, because your account already lets you edit.

A password manager or a private note is a good place for it. Treat it like a password: anyone who has it can change or delete the document.

1. 1

   Open the document

   #Copy sectionAsk about this

   Go to its link, for example markdrop.in/q3-plan.

2. 2

   Choose Edit

   #Copy sectionAsk about this

   Choose More actions › Edit. Markdrop asks you to Enter your edit secret.

3. 3

   Paste the secret

   #Copy sectionAsk about this

   Paste the sk_… code and choose Unlock editor.

4. 4

   Make your changes

   #Copy sectionAsk about this

   Edit the text, then choose Save changes. Settings in the editor holds the password, expiry and Delete document.

Attach an anonymous document to your account and you won't need the secret again. It then shows in My files with its analytics, and you can choose who can open it.

In the tab you published from, sign in and choose Save to my account on the document. Markdrop uses the secret held in that tab to prove the document is yours.

If that tab is gone but you still have the secret, you can claim it through the API with your API token:

curl -X POST https://api.markdrop.in/api/v1/documents/q3-plan/claim \
  -H "Authorization: Bearer mdk_••••" \
  -H "X-Edit-Secret: sk_••••"

A document that already belongs to another account can't be claimed.

The API takes the secret in the X-Edit-Secret header. For example, to replace a document's text:

curl -X PUT https://api.markdrop.in/api/v1/documents/q3-plan \
  -H "Content-Type: application/json" \
  -H "X-Edit-Secret: sk_••••" \
  -d '{"title": "Q3 plan", "content": "# Q3 plan\n\nUpdated."}'

DELETE on the same address deletes the document, and PATCH …/slug with {"new_slug": "q3-plan-final"} changes its link.

If you own the document, you can replace its secret. The old one stops working at once, and the new one is returned once:

curl -X POST https://api.markdrop.in/api/v1/documents/q3-plan/edit-secret/rotate \
  -H "Authorization: Bearer mdk_••••"

Rotating needs the owner's account; the secret alone can't rotate itself. If an anonymous document's secret leaks, delete the document and publish it again.

• Publish your first document
• Do you need an account?
• Passwords and expiry