Sink

What it does

Access control

Cloudflare Access is optional and can require an Access login for the dashboard; short links remain public.checked 12 Oct 2026

Access controls

Optional Cloudflare Access can protect dashboard and API access, and Sink verifies Access JWTs.checked 12 Oct 2026

AI features

Optional Workers AI can suggest short codes and titles.checked 12 Oct 2026

Analytics

The dashboard provides reports, logs, filters, and a near-real-time view.checked 12 Oct 2026

API

Each instance publishes authenticated REST API documentation and an OpenAPI document.checked 12 Oct 2026

API access

Yeschecked 20 Sep 2026

Audience

The project focuses on individuals and small teams who want a self-hosted shortener on Cloudflare.checked 12 Oct 2026

Bulk link creation

Yeschecked 20 Sep 2026

Custom domains

Yeschecked 20 Sep 2026

Deployment

Sink can be deployed to Cloudflare Workers or Cloudflare Pages; the documentation recommends Workers and marks Pages deprecated.checked 12 Oct 2026

Geo targeting

Yeschecked 20 Sep 2026

Import and export

Sink supports transferring links via JSON and exporting access analytics as CSV.checked 12 Oct 2026

Integrations

The integrations page lists AI Skills, browser extensions, Raycast, Apple Shortcuts, and an iOS app, and says third-party integrations may be maintained independently.checked 12 Oct 2026

Link management

Links can have expiration dates, passwords, warning pages, tags, and routing by device or country.checked 12 Oct 2026

MCP

Sink provides an MCP endpoint at POST /api/mcp that authenticates with the same bearer token as the REST API.checked 12 Oct 2026

Notable limit

A link can have up to 10 tags, each 1–32 characters long.checked 12 Oct 2026

Product

Sink is a self-hosted short-link app with visit analytics that runs on Cloudflare without a VPS.checked 12 Oct 2026

Purpose

Sink is a self-hosted short-link app with visit analytics that runs on Cloudflare.checked 12 Oct 2026

Required services

D1 and KV are required; Analytics Engine is recommended, while R2 and Workers AI are optional.checked 12 Oct 2026

Security

Dashboard passwords are stored as PBKDF2 hashes, with a documented exception for some legacy links migrated from KV.checked 12 Oct 2026

Security limits

Short links remain public when Cloudflare Access is enabled, and API documentation remains public unless separately protected.checked 12 Oct 2026

Social previews

Links can use custom titles, descriptions, and images for social previews; image uploads require R2 and have a 5 MB maximum.checked 12 Oct 2026

Who it is for

The project describes itself as a self-hosted short-link app for people who want visit analytics.checked 12 Oct 2026