So I'm not sure what my policy is going to be with temp users and large data users. It probably would be better to use an actual account. So it's pretty easy to script. The only slightly tricky part is keeping cookies between requests. I almost regret posting that code because it can be summed up so easily. Login with post form names..{username,password} Upload image with post form name..{file} Post to '/ppkey/fset/{identifier}' Get image at '/ppkey/fget/{username}/{identifier}' By convention that identifier usually leads with an app name so a user can use multiple apps without a problem. You might not need to do that but it's your call. ppkey means public pkey means for other logged in users skey means only you can see it. fset means set a file associated with a key fget means get a file associated with a key set means set a string associated with a key get means get a string associated with a key fhash means get the sha1 hash of a file. For pkey and ppkey a user is a part of the get url because we need to know which user's content we are getting.