A web-based application that allows users to share text and files in real-time through secure, encrypted sessions.
Tired of sharing text / files across different computers? Try this clippy!
- Session-based sharing: Create or join sessions using short, custom-length IDs. Server-minted IDs leave out
i,o,e,0and1, so an ID survives being read aloud or copied by eye; name your own and any ofa-z0-9is fair game. The ID field is a password input so the OS drops out of a Chinese IME on focus — the value stays visible - Public Clippys: Hosts can unlock a session with the padlock beside the QR code to list it on the entry page. The five newest published sessions appear there with name, ID, creation time and last update, and they appear and disappear live over a WebSocket. Everything is private until someone deliberately unlocks it
- Encrypted payloads: Each session uses a 256-bit AES-GCM key derived client-side from the connection ID (SHA-256 KDF). All block content is encrypted before it leaves the browser, so the backend only ever sees ciphertext. The server issues the ID and could derive the key too — this is encrypted-at-rest and on-the-wire, not strict end-to-end against a malicious server
- Real-time collaboration: See blocks appear instantly when other users create them
- File uploads: Support for small file uploads. Drop one or several files anywhere on the session page and they upload straight away — no need to open the composer first
- Image previews: Uploaded images are decrypted in the browser and shown as thumbnails
- Curl upload: Upload text or files from the terminal — host can enable/disable per session
curl -d 'hello' https://your-host/u/SESSION_ID curl -F f=@file.txt https://your-host/u/SESSION_ID - Raw links: Generate public short links to share decrypted text or files with anyone (e.g.
https://your-host/r/SESSION_ID/CODE) - User management:
- Custom or random user names, remembered in local storage between visits
- Host can transfer host rights to other users
- Host can control whether new users can join
- Session persistence: Sessions remain active until destroyed by host or after 1 hour of inactivity. When one expires or is destroyed, the tab returns to the dashboard on its own instead of stopping at a warning
- Block system: Add and delete text or file blocks, similar to Jupyter notebooks
Requires Docker and Docker Compose.
mkdir clippy && cd clippy
curl -fsSL https://raw.githubusercontent.com/SamWang8891/clippy/main/docker-compose.prod.yaml -o docker-compose.prod.yaml
curl -fsSL https://raw.githubusercontent.com/SamWang8891/clippy/main/setup.sh -o setup.sh
bash setup.shThe script will prompt you for the base URL, port, upload size limit, and connection ID length, then start the service.
To build from source instead, see Local Development.
- Node >= 22.20.0
- Python >= 3.12
- Frontend: Vite + React, in
frontend/. - Backend: Python FastAPI, in
backend/.
Run the frontend and backend in separate terminals with hot-reload:
# Terminal 1: backend
cd backend
cp .env.example .env
pip install -r requirements.txt # or: uv sync
python app.py
# Terminal 2: frontend
cd frontend
npm install
npm run devVite's dev server proxies /api, /ws, and /r/ to the backend at localhost:8123.
The FastAPI docs are available at http://localhost:8123/api/v2/docs.
Note: you may want to set ALLOWED_ORIGINS=* in backend/.env during development.
To build and run the full Docker image locally:
docker build -t clippy .
docker run -p 8080:80 --env-file backend/.env clippy- None right now.
Encounter issues or bugs? Feel free to report them in Issues and submit Pull Requests. For PR, please target dev branch.