i want to be able to upload and run a script on-the-fly, then remove it, everything on top of API

You could write a restAPI to receive said script request, but this is highly unadvised as you’re basically opening yourself to injection attacks. It’s one thing to send variables and use those on the NS end to execute code and possibly return a response, but to accept any script and execute it is not a good plan.

exactly, i do not want to create a backdoor in my env

Why can’t you send variables to a script then? Why does the entire script need changed each time?

you are right. i just had a specific use for this scenario, i do not need it for a specific script

Add a parameter to your api request then use a guard clause to handle your one off?

it is a good idea. If I continue your idea, i can make some hash-check or some key-exchange on top of the restlet