---
title: "A presigned GET (download) or PUT (upload) URL for one key, valid 1 minute to 7 days"
method: POST
path: "/storage/buckets/{bucketId}/presign"
tags: ["Storage"]
---

# A presigned GET (download) or PUT (upload) URL for one key, valid 1 minute to 7 days

`POST /storage/buckets/{bucketId}/presign`

## Request

- Base URL: `https://hostingsurge.com/api/v1`
- URL: `https://hostingsurge.com/api/v1/storage/buckets/{bucketId}/presign`
- Auth: one of:
  - HTTP bearer
  - API key in cookie `__Host-hs_session`

## Path parameters

- `bucketId` string, uuid, required

## Request body

- object
  - `key` string, required
  - `method` 'GET' | 'PUT'
  - `expiresInSeconds` integer
  - `contentType` string: PUT only: the Content-Type the upload must send
  - `download` boolean: GET only: make browsers save the file instead of displaying it

## Response `200`

The URL

- object
  - `url` string, required
  - `method` 'GET' | 'PUT', required
  - `expiresAt` string, required: ISO-8601 timestamp
  - `headers` object, required: headers the request must send exactly (PUT with a content type)

## Other responses

- `400`: Invalid request (code invalid_request)
- `401`: Missing or invalid session/token (code unauthorized)
- `402`: A storage limit or quota is reached (code limit_reached)
- `403`: Authenticated but not permitted (code forbidden)
- `404`: Not found or not visible to the caller (code not_found)
- `409`: Conflicting state (code conflict)
- `429`: Too many requests (code rate_limited); see Retry-After
- `501`: Object storage is not configured on this server (code not_configured)
- `503`: The storage server is unavailable (code provider_unavailable)

---

[API](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api.md) · [All operations](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api/llms.txt) · [OpenAPI document](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api/revisions/4d08337cdff1?raw)