DropPoint Integration¶
Procnote can use DropPoint to receive attachment files from another device, such as a phone, through a QR-code upload flow.

What DropPoint Is¶
DropPoint is a temporary encrypted file handoff relay. Procnote creates a short-lived drop point, shows a QR code, and later imports one encrypted upload as local Procnote attachments.
DropPoint is not built into Procnote and is not a permanent storage service. You need to set up and operate your own DropPoint instance before enabling this integration. The DropPoint relay stores ciphertext only; Procnote decrypts the upload locally and then stores the plaintext files in the execution's attachment directory.
For DropPoint setup and deployment details, see the DropPoint repository:
https://github.com/shunichironomura/drop-point
Configure a DropPoint Instance¶
Follow the DropPoint documentation to deploy a reachable DropPoint server and generate an API token. At minimum, your DropPoint instance needs:
- an externally visible
base_urlfor sender browsers; - an API token configured on the DropPoint server;
- HTTPS for non-local deployments, so browser encryption APIs are available;
- request body limits and upload timeouts large enough for the files you expect users to upload.
For local development, DropPoint can run on http://localhost. Procnote rejects non-HTTPS DropPoint URLs except loopback HTTP URLs.
Enable DropPoint in Procnote¶
Set these environment variables before starting Procnote:
| Variable | Required | Description |
|---|---|---|
PROCNOTE_DROPPOINT_URL |
Yes | Base URL of your DropPoint instance, for example https://drop.example.com. Must not include query, fragment, or user info. |
PROCNOTE_DROPPOINT_API_TOKEN |
Yes | Plaintext DropPoint API token used by Procnote to create receiver-side drop points. |
PROCNOTE_DROPPOINT_TTL_SECONDS |
No | Requested lifetime, in seconds, for each upload session. Must be a positive integer. |
PROCNOTE_DROPPOINT_MAX_BYTES |
No | Requested maximum encrypted upload size, in bytes. Must be a positive integer and within the server's configured limit. |
Example:
PROCNOTE_DROPPOINT_URL=https://drop.example.com \
PROCNOTE_DROPPOINT_API_TOKEN='your-drop-point-token' \
PROCNOTE_DROPPOINT_TTL_SECONDS=600 \
PROCNOTE_DROPPOINT_MAX_BYTES=52428800 \
procnote /path/to/my-workspace
Both required variables must be set. If only one of them is set, Procnote disables DropPoint and logs a configuration warning.
Use DropPoint During an Execution¶
When DropPoint is configured, attachment inputs show an Upload via QR Code button.
- Click Upload via QR Code on an attachment input.
- Ask the sender to scan the QR code with their device.
- Confirm that the sender's upload page shows the same human-readable drop name shown in Procnote.
- Wait while the sender selects and uploads files.
- Procnote imports the uploaded files as local attachments and closes the remote drop point.
If local import fails after upload, Procnote keeps the DropPoint session open until it is cancelled, retried, closed, or expires, so the import can be retried without asking the sender to upload again.