OxiCloud exposes a fully RFC 4918 compliant WebDAV interface at /webdav/. It works with all major file managers and sync clients.
https://your-server:8086/webdav/
HTTP Basic Authentication:
Authorization: Basic base64(username:password)
::: tip Always use HTTPS in production — Basic auth sends credentials in every request. :::
| Method | Description |
|---|---|
PROPFIND |
List directory contents / get file properties |
GET |
Download a file |
PUT |
Upload a file |
MKCOL |
Create a folder |
MOVE |
Move or rename a file/folder |
COPY |
Copy a file/folder |
DELETE |
Delete a file/folder |
LOCK / UNLOCK |
File locking |
Use PROPFIND with a Depth header:
PROPFIND /webdav/projects/ HTTP/1.1
Depth: 1
Content-Type: application/xml
<?xml version="1.0" encoding="utf-8" ?>
<D:propfind xmlns:D="DAV:">
<D:allprop/>
</D:propfind>Successful directory listings return 207 Multi-Status.
GET /webdav/projects/document.pdf HTTP/1.1
Authorization: Basic base64(username:password)PUT /webdav/projects/document.pdf HTTP/1.1
Content-Type: application/pdf
<file bytes>MKCOL /webdav/projects/new-folder HTTP/1.1MOVE /webdav/old-location.pdf HTTP/1.1
Destination: https://your-server/webdav/new-location.pdfCOPY /webdav/original.pdf HTTP/1.1
Destination: https://your-server/webdav/copy.pdfDELETE /webdav/projects/document.pdf HTTP/1.1- Open This PC → Map network drive
- Enter:
https://your-server:8086/webdav/ - Check Connect using different credentials
- Enter your OxiCloud username and password
- Go → Connect to Server (⌘K)
- Enter:
https://your-server:8086/webdav/ - Enter credentials when prompted
- Open Files → Other Locations
- In the address bar, type:
davs://your-server:8086/webdav/ - Enter credentials
- In the address bar, type:
webdavs://your-server:8086/webdav/
# List root directory
curl -u user:pass -X PROPFIND https://your-server:8086/webdav/ \
-H "Depth: 1"
# Download a file
curl -u user:pass https://your-server:8086/webdav/document.pdf -o document.pdf
# Upload a file
curl -u user:pass -T localfile.txt https://your-server:8086/webdav/remotefile.txt
# Create a folder
curl -u user:pass -X MKCOL https://your-server:8086/webdav/new-folder/OxiCloud streams PROPFIND responses, so listing directories with thousands of files doesn't consume excessive memory.
- the WebDAV handler is only an HTTP adapter; file and folder operations still go through the same application services used by the REST API
- HTTP Basic Authentication is supported for DAV clients, while authorization rules remain the same as the rest of OxiCloud
- delete operations integrate with trash when the trash feature is enabled
- Always use the
/webdav/base path - Prefer HTTPS because WebDAV uses Basic Authentication
- On Windows, make sure the
WebClientservice is enabled - OxiCloud rejects path traversal segments such as
.and..at the HTTP boundary