Skip to main content
POST
Create an attachment upload

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Path Parameters

org
string
required

Body

application/json
filename
string
required

The name the attachment is stored and downloaded under

Required string length: 1 - 255
size_bytes
integer
required

The size of the file, checked against the org's limit

Required range: 1 <= x <= 5368709120
sha256
string
required

Hex SHA-256 of the file; S3 refuses the upload if the body differs

Pattern: ^[a-f0-9]{64}$

Response

Successful Response

upload_id
string
required

Names this upload in the attestation that attaches it

url
string
required

Where to PUT the file, valid until upload_url_expires_at

method
string
required
Allowed value: "PUT"
headers
Headers · object
required

Headers the PUT must carry exactly as given; they are signed

upload_url_expires_at
number
required

Epoch seconds after which the PUT is refused; mint again to retry

upload_id_expires_at
number
required

Epoch seconds after which the attest call refuses the upload id and the uploaded file is discarded; mint and upload again to recover

max_size_bytes
integer
required

The org's limit for a single upload

Last modified on October 13, 2026