Flat-file · No database · Self-hosted

Patch any URL through
a short/secure link.

MD Fly runs on plain PHP and JSON files — no MySQL, no cron, no bloat. Password-lock links, cap their clicks, set them to expire, and hand out a public API key-free.

patch panel — new connection

Destination URL

Advanced options — alias, password, expiry, click limit

Custom alias (optional)

3–32 characters: letters, numbers, "-" or "_". Leave blank for a random code.

Password (optional)

Stored as a bcrypt hash — never in plain text.

Expires (UTC) (optional)

Link auto-deactivates at this time.

Max clicks (optional)

Link auto-deactivates once reached.

Local history

Password protection

Optional bcrypt-hashed passwords gate access before a visitor is forwarded.

Expiry & click limits

Set a UTC expiration or a max-visit count. Links deactivate themselves automatically.

Public API

Keyless JSON endpoint, rate-limited to 6 requests/minute per IP.

Developer API

POST https://mdfly.link/api.php

Create a link. Only target is required.

curl -X POST https://mdfly.link/api.php \
  -H "Content-Type: application/json" \
  -d '{
    "target": "https://example.com/page",
    "alias": "my-launch",
    "password": "",
    "expires": "2026-12-31T23:59:00Z",
    "max_clicks": 500
  }'

Check a link's status: GET https://mdfly.link/api.php?action=stats&code=my-launch