What it does
Point it at a Cloudflare R2 bucket and it gives you a clean, browsable file portal — but access is scoped by token, not wide open. Each token maps to a specific subdirectory "cage," so you can hand a client a link to their folder only, with a distinct token per client, all backed by one shared bucket. Built as an evolution of the open-source Listr2 by xolyn, developed further with Jeff Parrish PC Services and AI assistance from Claude, Gemini, and Copilot.
Built for real-world file sharing
- Token-based scoped access.URL tokens map to environment secrets, restricting each visitor to a specific subdirectory — nothing else in the bucket is reachable.
- Six languages, automatically.Detects the browser's language and serves the UI (including localized relative timestamps like "30 minutes ago" / "hace 30 minutos" / "30分钟前") in English, Spanish, Chinese, French, German, or Russian.
- Smart file-type recognition.Distinct icons for Apple Silicon vs. Intel Mac installers, Windows/Linux/Android packages, media, documents, and archives — recognizable at a glance.
- Read-only by design.Only GET requests are allowed; every management/write operation is blocked. Industry-standard security headers guard against XSS, clickjacking, and MIME-sniffing.
- Fast at scale.Directory listings are cached for 5 minutes, and large directories (up to 10,000 items) are handled safely.
Under the hood
Runs entirely on Cloudflare's edge — a Worker in front of an R2 bucket, no origin server to maintain. Theme preference (light/dark/system) persists in the browser via localStorage.
Cloudflare Workers
Cloudflare R2
JavaScript
Glassmorphism UI
i18n (6 languages)