The AES key and IV are used only in this browser. They are never sent to the API.
This page sends the authentication header in the same format as the Python client:
Bearer <key>.
On desktop browsers you can select a folder. On mobile browsers the file picker behavior depends on the browser and may allow selecting files but not folders.
Text is displayed below. Pulled files are downloaded by the browser.