Command reference

s2u help prints this on the machine in front of you, and is authoritative for the version you actually have. This page is the same material, organised for reading.

Account

Command	What it does
s2u login	Authenticate this machine. Opens a browser.
s2u whoami	Who this machine is signed in as.
s2u logout	Sign this machine out.
s2u signout <device>	Sign out another device, by id or name.
s2u devices	List the machines signed in to your account.
s2u contacts	List your contacts.

Sharing

s2u <file> [options]

Option	Effect
--expires DUR	Stop working after a duration, such as 7d.
--name NAME	Present the file under a different name.
--password	Require a password. Prompts, so it stays out of your history.
--one-time	Die after a single download. Overrides --max-views.
--max-views N	Stop after N views. Downloads do not consume views.
--private	Upload without sharing it with anyone.
--sharenet ID	Post it into a sharenet for its members, instead of making a link.
--project ID	Post it into one of a sharenet’s projects.
--email, --to EMAIL	Restrict to a recipient who verifies their address.
--restrict, --unrestrict	Whether a recipient may reshare. Restricted by default.
--encrypt	Encrypt end to end.
--device ALIAS	Send to one of your own devices, end to end.
--contact EMAIL	Send to another user’s devices, end to end. Contacts only.
--allow-domain, --deny-domain	Allow or refuse an email domain.
-l, --live	Push text changes to the link until you stop.
-w, --watch	Live, plus a durable flush every 60 seconds.
--qr	A QR of the content itself. Nothing is uploaded.
--qrl	Upload, then a QR of the link.
--allow-secrets, --no-scan	Proceed past, or skip, the local secret scan.
--json	Machine-readable output.

A file posted with --sharenet or --project has no link. Members find it under Files on the sharenet or project page in the portal, and the id is in that page’s address. It counts toward the sharenet owner’s storage and stays until someone deletes it. Link options such as --password, --one-time and --to are refused with these two, and your standing defaults for encryption, view limits and domains do not apply.

Fetching

Command	What it does
s2u get <url>	Download a share. Accepts a link with its #k= key.
s2u get <url> --output PATH	Save somewhere specific.
s2u get <url> --convert-pdf	Convert on the way out. Not for encrypted shares.
s2u get <url> --convert-docx	The same, to a document. Cannot combine with the above.
s2u pull <url-or-id>	Fetch by identifier.
s2u pull --all	Fetch everything.

Managing your shares

Command	What it does
s2u ls	List your shares.
s2u stats <id>	Activity for one share.
s2u pause <id> / s2u resume <id>	Temporarily stop and restart a share.
s2u revoke <id>	Kill a share immediately.
s2u revoke --all, s2u revoke-all	Kill all of them.
s2u rm <id>...	Delete shares outright.

Forms

See Interactive forms for the authoring syntax.

Command	What it does
s2u <file>.mdx	Share an .mdx file as a fillable form.
s2u forms responses <formId>	List who submitted a form and when.
s2u forms response <formId> <responseId>	Decrypt and print one response.

Receiving

Command	What it does
s2u receive	Show what is waiting and when the oldest expires.
s2u receive DIR	Choose which of them to save into a directory.
s2u receive --all	Save everything to your receive folder.
s2u receive --id ID	Save just one.
s2u receive --watch	Keep running and save each as it arrives.
s2u inbound disallowed|approvals|auto	Your default policy for incoming files.
s2u trust|block|require-approval <email>	A standing decision about one sender.
s2u untrust|unblock <email>	Undo one.
s2u incoming approve|reject <id>	Act on something waiting.

Your own network

Command	What it does
s2u <file> --dest IP[:port]	Send directly to another machine.
s2u --receive	Wait for a direct transfer.
s2u <file|dir> --serve	Serve over HTTP on your network.
s2u <file> --broadcast	Offer a file for nearby devices to pull.
s2u discover	Find nearby offers and pull one.
s2u lan id	This machine’s identity and safety number.
s2u lan trusted	Manage trusted devices.
s2u lan activity	What has happened recently.

Useful modifiers: --password or --no-password, --port N, --bind IP, --allow-ip IP,..., --path DIR, --overwrite, --resume, --keep, --qr.

Configuration

Command	What it does
s2u config show	Current configuration.
s2u config defaults	Standing upload defaults and where each came from.
s2u config set-default <key> <value>	Set one.
s2u config unset-default <key>	Clear one.
s2u config set-receive-dir PATH	Where received files go.
s2u config set-receive-auto on|off	Whether a background receiver saves them.
s2u config set-base-url <domain>	Point at a different deployment.

Defaultable keys: expires, reshare, encrypt, max-views, no-scan, allow-domains, deny-domains.

Some options are deliberately not defaultable

password, one-time, recipients, visibility, allow-secrets, and the device and contact targets cannot be set as standing defaults. Each of them is a decision that should be made per file, in front of the file, and a default that silently applies one of them is how the wrong thing gets shared.

Other

Command	What it does
s2u update [--channel stable|beta]	Update this copy.
s2u version	The build you are running.
s2u tui	A terminal interface.
s2u daemon ...	The background service.
s2u mcp serve	Serve as a tool provider for an agent.
s2u install-agent-tools	Register with Codex, Claude Code or Gemini CLI.

Environment variables

Variable	Effect
SHARE2US_BASE_URL	Apex domain. The API and link hosts are derived from it.
SHARE2US_API_BASE	Override the API base directly.
SHARE2US_SHARE_BASE_URL	Override the displayed link base.
SHARE2US_DEFAULT_EXPIRY	Default upload expiry. Defaults to 7d.
SHARE2US_API_TOKEN	A personal access token, for automation.

A token authenticates non-interactively and overrides a saved login. It cannot perform device or contact end-to-end sends, because those need a device key that a token does not carry.