--- title: "Upload a draft attachment" method: POST path: "/v1/drafts/{id}/attachments" tags: ["Drafts"] --- # Upload a draft attachment `POST /v1/drafts/{id}/attachments` ## Request - Base URL: `https://api.curviate.com` - URL: `https://api.curviate.com/v1/drafts/{id}/attachments` - Auth: HTTP bearer Adds one file to the Draft as the raw request body, for media too large to send inline: a video (MP4, up to 50 MiB), a PDF (up to 50 MiB) or an image. Content-Type is the file's type, Content-Length is required; kept only if it arrives whole. Same media rules as inline. ## Path parameters - `id` string, required ## Query parameters - `filename` string, required ## Response `201` The Draft, with the new attachment last in attachments[]. - object - `object` 'draft', required: Response type discriminator. - `id` string, required: Draft id (drf_...). - `account_id` string, nullable, required: The account this Draft will publish as, or null for none yet. - `status` 'draft' | 'scheduled' | 'failed', required: Derived: failed if failure is set, else scheduled if scheduled_at is set, else draft. - `text` string, nullable, required: Post body text. May be empty or null while drafting. - `attachments` object[], required: Media, in post order. - `id` string, required: Attachment id (att_...). Send {id} in a PATCH attachments list to keep it. - `content_type` string, required: The file's type. - `filename` string, required: File name. - `size_bytes` integer, required: Stored size in bytes. - `url` string, nullable, required: Signed download link to the stored file, valid for 1 hour. Read the Draft again for a fresh one. Null when the stored file is unavailable. - `quoted_post_id` string, nullable: A post to quote or repost when published. - `can_read` 'anyone' | 'relations_only' | 'null', nullable: Who can read the post once published. - `can_comment` 'anyone' | 'relations_only' | 'no_one' | 'null', nullable: Who may comment once published. - `post_as` string, nullable: Company page id to post as. - `scheduled_at` string, nullable, required: When Curviate publishes the Draft (UTC, whole minute), or null. It goes out up to 20 seconds after this time. A failed Draft has null here; the time that failed is failure.scheduled_at. - `failure` object, nullable, required: Why the last scheduled publish failed; present on failed Drafts only. - `code` 'platform_error' | 'rate_limited' | 'account_unavailable' | 'media_rejected' | 'budget_exhausted' | 'outside_activity_window' | 'no_active_seat' | 'not_publishable' | 'platform_rejected' | 'missed' | 'outcome_unknown': Why it failed. outcome_unknown: the platform gave no usable answer, so the post may be live; check the account's posts before you publish again. missed: Curviate could not start within an hour of the time. platform_error and rate_limited: 3 attempts over about 15 minutes all failed. - `message` string: What went wrong and what to do next. Never contains post text. - `failed_at` string: When it failed. - `scheduled_at` string: The time that failed to publish. - `created_at` string, required: Creation time. - `updated_at` string, required: Last change. - `safety_warning` SafetyWarning: Present on a successful response when this account crossed an account-safety ceiling while the affected budget row is on the default warn posture. The action still happened. Field-identical to the BUDGET_EXHAUSTED error body except that blocked is false and hint.message describes the outcome, so one branch handles both postures and switching the account to enforce is a configuration change rather than a client rewrite. - `row` string, nullable, required: The budget row that breached, for example profile_views or pending_invites. Null when the breach is not about a row: an activity_window warning on an action that spends no budget of its own (editing a message, dismissing a notification, a Recruiter or Sales Navigator admin action) is still governed by the hours the account works in. Read hint.parameter for what to change; whenever this is null it names posture, because the activity window edges are set per action type and this action has none, so the levers that reach it are the account timezone and posture. - `reset_at` string, nullable, required: The instant the refusal lifts: the window roll on a ceiling refusal, the next window open on an activity-window one. Null in the two cases no clock frees, the pending_invites gauge and InMail credits (row inmail). - `hint` object, required - `parameter` string, required: The settable parameter on PATCH /v1/{account_id}/safety-policy. - `message` string, required: What the condition is and what changing that parameter would do. This is the one field whose text differs from the BUDGET_EXHAUSTED refusal: here it says the action went through, and on a ceiling breach how far past the ceiling this row now stands, rather than telling you to set posture to warn when it already is. Branch on parameter, reason and blocked, never on this text. - `reason` 'ceiling' | 'activity_window', required: Which rule was crossed. ceiling means the row's configured limit is spent; activity_window means the account is outside the hours it works in, which is a different fact with a different remedy. hint.parameter names the right setting for each. - `blocked` boolean, required: Always false here. True on the BUDGET_EXHAUSTED refusal carrying the same payload. ## Other responses - `400`: Invalid input. Media rules: up to 20 images (JPEG, PNG, GIF, WEBP, at most 6012 x 6012 px), or one MP4 video, or one PDF, never mixed. Also: an empty file, a filename missing, or a body that did not carry exactly its Content-Length (a truncated upload; nothing is kept). - `401`: Missing or invalid API key. - `403`: Forbidden. NO_ACTIVE_SEAT: the account is not attached to an active seat. - `404`: No Draft with this id among yours (RESOURCE_NOT_FOUND). - `409`: DRAFT_PUBLISHING: a publish of this Draft is in flight. Read it again in a few seconds. - `411`: INVALID_REQUEST: Content-Length is required; a chunked upload is not accepted. - `413`: PAYLOAD_TOO_LARGE: the file is over its type's limit: 5 MiB per image, 50 MiB for a video, 50 MiB for a PDF. - `415`: UNSUPPORTED_MEDIA_TYPE: Content-Type is not one of the accepted file types (JSON and multipart bodies included). - `422`: MEDIA_QUOTA_EXCEEDED: the file would take the bucket past its 2 GiB quota; nothing is stored. - `429`: Rate limited, slow down and retry after the hinted delay. --- [API](https://skmtc.dev/curviate/apis/curviate-api.md) · [All operations](https://skmtc.dev/curviate/apis/curviate-api/llms.txt) · [OpenAPI document](https://skmtc.dev/curviate/apis/curviate-api/revisions/eab848801d95?raw)