---
title: "Reserve an asset upload"
method: POST
path: "/api/spaces/{accountId}/{spaceId}/uploads"
tags: ["Asset"]
---

# Reserve an asset upload

`POST /api/spaces/{accountId}/{spaceId}/uploads`

## Request

- Base URL: `https://makefx.app`
- URL: `https://makefx.app/api/spaces/{accountId}/{spaceId}/uploads`
- Auth: one of:
  - OAuth 2 (authorization code, authorization URL `https://makefx.app/api/oauth/authorize`, token URL `https://makefx.app/api/oauth/token`, scopes: `write`)
  - API key in cookie `auth_token`

Creates one uploading asset and returns a short-lived one-use direct PUT URL.

## Path parameters

- `accountId` string, required: accountId path parameter
- `spaceId` string, required: spaceId path parameter

## Headers

- `API-Version` '2026-09-10'

## Request body

- object
  - `kind` 'image' | 'video' | 'audio', required
  - `filename` string, required
  - `mime` string, required
  - `size_bytes` integer, required
  - `name` string
  - `recipe` object
    - `provider` 'external', required
    - `model` string, required
    - `prompt` string
    - `params` object
    - `references` object[]
      - `asset_id` string, required
      - `slot` string, required
      - `order` integer, required
    - `external_run_id` string, nullable
  - `position` object: Passing one pins the card; omitting lets the canvas lay it out.
    - `x` number, required
    - `y` number, required
  - `tags` string[]
  - `request_id` string

## Response `200`

Success

- object
  - `asset_id` string, required
  - `upload_url` string, uri, required
  - `method` 'PUT', required
  - `headers` object, required
  - `expires_at` string, date-time, required
  - `next_poll_seconds` integer, required
  - `web_url` string, uri, required
  - `idempotent_replay` boolean

## Other responses

- `400`: The request did not match the schema
- `401`: No valid credentials. WWW-Authenticate names the protected resource metadata to start from
- `403`: The credentials are valid but not enough: the token lacks the scope, or the action needs a browser session rather than an app token
- `404`: Not found
- `429`: Rate limited. RateLimit names the policy; Retry-After says when to try again
- `500`: Internal server error

---

[API](https://skmtc.dev/makefx/apis/makefx-app-api.md) · [All operations](https://skmtc.dev/makefx/apis/makefx-app-api/llms.txt) · [OpenAPI document](https://skmtc.dev/makefx/apis/makefx-app-api/revisions/a05584da31c6?raw)