---
title: "Perform multiple operations with attachments"
method: POST
path: "/api/workspaces/{workspaceId}/attachments/bulk"
tags: ["CRUD", "ItemAttachments"]
---

# Perform multiple operations with attachments

`POST /api/workspaces/{workspaceId}/attachments/bulk`

## Request

- Base URL: `https://app.airfocus.com`
- URL: `https://app.airfocus.com/api/workspaces/{workspaceId}/attachments/bulk`
- Auth: HTTP bearer

Accepts a list of create/update/patch/delete operations (see the request model for more details).<br/>
Each operation can target a single or multiple attachments.<br/>
Returns a list of results for each input operation including errors.<br/>
Guarantees that the size and order of the returned results matches the order of input operations.<br/>Requirements:<br/>- auth-client scopes: "workspace"<br/>- user permission: "write" or higher

## Path parameters

- `workspaceId` string, uuid, required

## Query parameters

- `actAsAdmin` boolean

## Request body

- ItemAttachmentBulkAction[]
  - union
    - ItemAttachmentBulkCreate
      - `resource` CreateItemAttachmentRequest, required
        - `contentType` string, required: Type of updated content.
        - `itemId` string, uuid, required: ID of the item to which the attachment is linked.
        - `name` string, required: Name of the attachment, e.g. its file name (to be displayed in UI).
        - `uri` string, required: URI of the attachment contents. It can be any URI, but conventionally it's a relative URI like 'attachment:1ecb9ecd-8a97-403a-a74a-741eb4b8fb69' with UUID of a file uploaded to airfocus file-storage. Such URI is then resolved by clients into a full HTTPS URL.
      - `type` 'create', required
    - ItemAttachmentBulkDelete
      - `id` string, uuid, required
      - `type` 'delete', required
    - ItemAttachmentBulkPatch
      - `id` string, uuid, required
      - `transform` JsonPatchOperation[], required: A JSON Patch document. See https://jsonpatch.com/ for more information.
        - union
          - JsonPatchAdd
            - `op` 'add', required
            - `path` string, required
            - `value` unknown, required
          - JsonPatchCopy
            - `from` string, required
            - `op` 'copy', required
            - `path` string, required
          - JsonPatchMove
            - `from` string, required
            - `op` 'move', required
            - `path` string, required
          - JsonPatchRemove
            - `old` unknown
            - `op` 'remove', required
            - `path` string, required
          - JsonPatchReplace
            - `old` unknown
            - `op` 'replace', required
            - `path` string, required
            - `value` unknown, required
          - JsonPatchTest
            - `op` 'test', required
            - `path` string, required
            - `value` unknown, required
      - `type` 'patch', required
    - ItemAttachmentBulkUpdate
      - `id` string, uuid, required
      - `resource` UpdateItemAttachmentRequest, required
        - `contentType` string, required: Type of uploaded content.
        - `name` string, required: Name of the attachment, e.g. its file name (to be displayed in UI).
        - `uri` string, required: URI of the attachment contents. It can be any URI, but conventionally it's a relative URI like 'attachment:1ecb9ecd-8a97-403a-a74a-741eb4b8fb69' with UUID of a file uploaded to airfocus file-storage. Such URI is then resolved by clients into a full HTTPS URL.
      - `type` 'update', required

## Response `200`

- ItemAttachmentWithEmbed[]
  - `_embedded` object, required
  - `contentType` string, required: Type of updated content.
  - `createdAt` string, date-time, required: When this attachment link has been created.
  - `id` string, uuid, required: ID of an item-attachment link.
  - `itemId` string, uuid, required: ID of the item to which the attachment is linked.
  - `lastUpdatedAt` string, date-time, required: When this attachment link has been updated for the last time.
  - `name` string, required: Name of the attachment, e.g. its file name (to be displayed in UI).
  - `uri` string, required: URI of the attachment contents. It can be any URI, but conventionally it's a relative URI like 'attachment:1ecb9ecd-8a97-403a-a74a-741eb4b8fb69' with UUID of a file uploaded to airfocus file-storage. Such URI is then resolved by clients into a full HTTPS URL.

## Other responses

- `400`: If payload is invalid.
- `401`: If missing authentication token.
- `403`: If user does not have the required permission, or authenticated client does not have the required access scopes.
- `default`: If any other error happens.

---

[API](https://skmtc.dev/airfocus/apis/airfocus-api.md) · [All operations](https://skmtc.dev/airfocus/apis/airfocus-api/llms.txt) · [OpenAPI document](https://skmtc.dev/airfocus/apis/airfocus-api/revisions/fc9ccaa2ec6d?raw)