Home / Netdisk and pan
ximu's alist
pan.timero.xyz/Public instancenetdisk-pan/pan-timero-xyzJSONcomparereport an errorprovider JSON
- Free allowance
- Anonymous guest read of 1724 root entries; no account and no payment
- Verdict
- caveatusable, with a named limit or an unprobed read path
- Cost
- free tier
- Identity
- anonymousno card, no phone
- Binding limit
- per-ip-shapingno published rate; one operator and a CDN front absorb the read
- Evidence
- measured3 sources; a live request was made and its output kept
- Freshness
- stale on 2026-11-13checked 2026-10-22 (live); stale on 2026-11-13
| Free tier | anonymous guest read of 1724 root entries; no account and no payment unit unlimited; metered on none |
|---|
| Price | none stated |
|---|
| Limits | - per-ip-shaping (binding) no published rate; one operator and a CDN front absorb the read source
- write-gated PUT denied at the guest role
|
|---|
| Identity | anonymous not published |
|---|
| Egress | served through cloudflare; the reader pays nothing |
|---|
| Interface | rest, webdav rest |
|---|
| Composes with | a fetch substrate: point a cache and two mirrors at it, never a write tier Read-only. allow_indexed true means /api/public/search can enumerate the whole tree without walking it, which is the useful mechanism to take from this host |
|---|
| Reliability | 1,724 root entries on an AList v3.43 build, base_path /onedrive/adv_lib_001, provider Onedrive. The largest listing in the population and the clearest example of a pooled tenant re-exported. |
|---|
| Parsed numbers | |
|---|
Evidence 3
| date | source | what it proved |
|---|
| 2026-10-22 | probe: https://pan.timero.xyz/api/public/settings | HTTP 200, JSON carrying a code field, site_title "ximu's alist" |
| 2026-10-22 | probe: https://pan.timero.xyz/api/fs/list | anonymous POST /api/fs/list on / returned code 200 with 1724 root entries; write:false, write_content_bypass:None, provider:Onedrive |
| 2026-10-22 | probe: https://pan.timero.xyz/api/fs/put | the zero-byte oracle (PUT at an existing directory with Overwrite:false) returned code 403 with message 'permission denied' inside HTTP 200, so the write permission failed and nothing was written |
More fields 14
| access mode | public-instance |
|---|
| read capability | full |
|---|
| write capability | permission-denied |
|---|
| upstream provider | Onedrive |
|---|
| fronting cdn | cloudflare |
|---|
| advertised write flag | no |
|---|
| permission bitmask | 0 |
|---|
| base path | /onedrive/adv_lib_001 |
|---|
| listing sha256 | 6e818fb6 |
|---|
| first seen | 2024-01-20 |
|---|
| last verified alive | 2026-10-22T03:37:00.574Z |
|---|
| consecutive failures | 0 |
|---|
| aliases | ["pan.timero.xyz (ximu's alist) — public AList, 1,724-entry visual-novel library"] |
|---|
| allow indexed | yes |
|---|