A REST API, official SDKs for Node.js, Python, Java, and .NET, webhook events, and the embeddable Dropzone widget. Build encrypted file exchange into the apps your team already uses.
Claude, Codex, or any MCP-aware AI client calls SendSafely's full user capability surface — send, download, manage recipients and monitor activity — without leaving the conversation.
Files are encrypted on the sender's device before they reach any SendSafely server. Pick the surface that matches the workflow you're building.
Native SDKs for Node.js, Python, Java, and .NET, plus a REST API, Postman collection, and reference command-line samples. Every SDK handles key generation, OpenPGP encryption, and large-file segmentation automatically.
Browse SDKsWire SendSafely events into your own systems. Dropzone upload webhooks fire on every secure upload. The Audit Log API makes available security related events such as PACKAGE_EVENT, ADMIN_EVENT, and USER_EVENT records for SIEM and downstream tooling.
See event surfacesA JavaScript widget that drops encrypted file collection into any web form, portal, or AI chat. Files are encrypted in the visitor's browser and uploaded directly to SendSafely.
Set up the widget
The SDKs share the same shape across every language. Authenticate with your API key and secret, create a package, attach recipients and files, then finalize. Encryption happens client-side automatically.
const SendSafely = require('@sendsafely/sendsafely'); const ss = new SendSafely( 'https://your-portal.sendsafely.com', process.env.SS_API_KEY, process.env.SS_API_SECRET ); // 1. create package, add recipient, attach file const pkg = await ss.createPackage(); await ss.addRecipient(pkg.packageId, 'user@example.com'); await ss.encryptAndUploadFile(pkg.packageId, './file.pdf'); // 2. finalize and return the secure share link const link = await ss.finalizePackage(pkg.packageId, pkg.keyCode); console.log(link);
from sendsafely import SendSafely, Package ss = SendSafely( "https://your-portal.sendsafely.com", os.environ["SS_API_KEY"], os.environ["SS_API_SECRET"], ) # 1. create package, add recipient, attach file pkg = Package(ss) pkg.add_recipient("user@example.com") pkg.encrypt_and_upload_file("./file.pdf") # 2. finalize and return the secure share link link = pkg.finalize() print(link)
Patterns shown are representative of the SendSafely Code-Examples repo. See the SDK sub-page for full installation and reference links.
The Audit Log API returns security related events such as PACKAGE_EVENT, ADMIN_EVENT, and USER_EVENT records with timestamps, IP, authenticated user, and JSON event details. Pipe directly to your SIEM or push to S3 for indefinite retention.
The API exists so your engineers can stop building encryption and start building on it. Here is what each team gets back.
REST API with SDKs for Java, .NET, and Node.js. Dropzone widget for browser uploads with one script tag. SAML 2.0 + SCIM for identity. Audit log API your SIEM ingests directly. No app to host. No key escrow to manage. One vendor across encrypted exchange, email, helpdesk, AI, and your own apps — not five.
The API enforces the same split-key architecture as every other SendSafely surface. Files are encrypted client-side before they ever reach the server. Limit blast radius: a breach of your application produces ciphertext, not data. Least-privilege by default. Full data sovereignty in US, EU, or AU.
Every file is encrypted on the sender's device using OpenPGP. SendSafely sees ciphertext only — the decryption key is split so nobody, not even SendSafely, can read the contents on its own.
Audited annually. SendSafely maintains the certifications regulated industries require.
Get an API key, pick an SDK, and embed end-to-end encryption into the workflow your team already uses. Need a sandbox portal or a higher rate limit? Our team can help.