---
title: "Upload multiple files to be attached to a specific vendor in an authority."
method: POST
path: "/v1/authorities/{id}/vendors/{vendorId}/attachments"
tags: ["Authorities"]
---

# Upload multiple files to be attached to a specific vendor in an authority.

`POST /v1/authorities/{id}/vendors/{vendorId}/attachments`

## Request

- Base URL: `https://api.domain.com.au`
- URL: `https://api.domain.com.au/v1/authorities/{id}/vendors/{vendorId}/attachments`
- Auth: one of:
  - API key in header `x-api-key`
  - OAuth 2
    - Authorization code: `https://auth.domain.com.au/v1/connect/authorize`
    - Client credentials
    - Token URL: `https://auth.domain.com.au/v1/connect/token` scopes: `api_authorities_write`
- TypeScript: <https://skmtc.dev/domain/apis/domain-public-api/docs/v1/authorities/:id/vendors/:vendorId/attachments/post.ts> (a function with typed inputs; its response is checked against the schema)

Upload multiple files to be attached to a specific vendor in an authority.

## Path parameters

- `id` string, uuid, required
- `vendorId` string, uuid, required

## Request body `multipart/form-data`

- AuthoritiesV1Attachments[]
  - `id` string, uuid
  - `attachment` string, binary
  - `fileType` string

## Response `201`

The files that were uploaded.

- AuthoritiesV1VendorAttachments[]
  - `id` string, uuid
  - `attachment` string, binary

## Other responses

- `400`: invalid input, object invalid
- `401`: Unauthorized access.
- `404`: Authority/Vendor does not exist.

## Changes

- **2023-02-28** `c4fc9a6df53a`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/domain/apis/domain-public-api/changes/v1/authorities/:id/vendors/:vendorId/attachments/post.md)

---

[API](https://skmtc.dev/domain/apis/domain-public-api.md) - [All operations](https://skmtc.dev/domain/apis/domain-public-api/llms.txt) - [OpenAPI document](https://skmtc.dev/domain/apis/domain-public-api/revisions/133015c6842c?raw)