Managed File Transfer

Your partners' file transfers, under control end to end

Your partners upload and fetch their files over SFTP, through an API or in a browser. You decide where they land, who can reach them and for how long. You see everything that happens to them.

Get started in 5 minutes Read the guide

What it does

Receive, store, authorise, trace

Your partners come in the way they know

SFTP for batch jobs, a REST API with an OpenAPI contract for your orchestrators, a web explorer for people. One account, one file tree, whichever door they use.

You store where you want

S3, HDFS, an existing SFTP server or local disk: a role mounts each storage at a path, with per-path rights denied by default. Access can be granted until a date and closes on its own.

You see everything

One audit line per operation, with the account, the path, the storage and the outcome. Prometheus metrics, OpenTelemetry traces, and a console to watch, kick and unban, live.

Security and operations

Built to hold the door, with one instance or many

Nothing is ever half visible. A file is published in one go, once fully received, even across instances.
Password, SSH key, FIDO2, JWT. Your identities, your provider, your groups mapped to roles.
Bans per door, shared. Failures add up across the cluster; a ban is lifted with one click, everywhere.
Access and sessions that expire. Temporary access with a reason, admin sessions revocable on every instance.
A cluster with no external database. Instances discover each other, talk over mTLS, and know when an outage is theirs alone.
A configuration checked before it starts. One file, one schema, one check command, secrets never displayed.

Get started

One binary, one image, one chart

Binary

Linux, ARM64, Windows. Static, no dependencies.

craft-file-gate config check config.toml
craft-file-gate --config config.toml

Docker

Distroless, scratch and alpine images, unprivileged.

docker run -p 2222:2222 -p 8080:8080 \
  -v ./config:/config -v data:/data \
  craftogether/craft-file-gate:latest

Kubernetes

Helm chart, multi-pod cluster ready out of the box.

helm install acme craft-file-gate \
  --set replicaCount=3

Operator guide Configuration reference