---
title: "Reserve upload profile attachments"
method: POST
path: "/api/v1/business/profile-attachments/reserve-upload"
tags: ["business"]
---

# Reserve upload profile attachments

`POST /api/v1/business/profile-attachments/reserve-upload`

## Request

- Base URL: `https://point11.ai`
- URL: `https://point11.ai/api/v1/business/profile-attachments/reserve-upload`
- Auth: OAuth 2 (authorization code, authorization URL `https://auth.point11.ai/oauth2/authorize`, token URL `https://auth.point11.ai/oauth2/token`)

Reserve a file to attach to a described business profile's description, declaring its name, media type, size and SHA-256: a PNG, JPEG, WebP or PDF up to 4 MiB, or a plain text, Markdown or CSV file up to 256 KB. Returns the attachment and one presigned upload: send the file as the body of exactly that request before it expires, then call business_profile_attachments_complete_upload. A profile takes up to 10 files, 8 MiB together. Attachments record the member who uploaded them, so an API key cannot reserve one.

## Headers

- `Point11-Organization` string, uuid
- `Idempotency-Key` string, uuid, required

## Request body

- BusinessProfileAttachmentsReserveUploadRequest
  - `filename` string, required: The file's name as the member sees it.
  - `mediaType` 'image/png' | 'image/jpeg' | 'image/webp' | 'application/pdf' | 'text/plain' | 'text/markdown' | 'text/csv', required
  - `byteLength` integer, required: Exact size in bytes: an image or a PDF at most 4 MiB, a text file at most 256 KB.
  - `sha256` string, required: Lowercase hex SHA-256 of the exact bytes you will upload.

## Response `200`

Success.

- BusinessProfileAttachmentsReserveUploadResponse
  - `attachment` object, required
    - `id` string, uuid, required
    - `filename` string, required
    - `mediaType` 'image/png' | 'image/jpeg' | 'image/webp' | 'application/pdf' | 'text/plain' | 'text/markdown' | 'text/csv', required
    - `byteLength` integer, required
    - `status` 'pending' | 'ready', required: pending until business_profile_attachments_complete_upload proves the upload.
  - `upload` object, nullable, required: Send the file as the body of exactly this request before expiresAt; the response body is JSON naming the stored file's etag. Null when the file was already uploaded: call business_profile_attachments_complete_upload.
    - `method` 'PUT', required
    - `url` string, uri, required
    - `headers` object, required
    - `expiresAt` string, date-time, required

## Other responses

- `400`: The input, query, or Idempotency-Key is invalid.
- `401`: The bearer is missing, expired, or not accepted.
- `402`: Billing refused the write: the code names the reason and `details.reason` carries it.
- `403`: The credential lacks the operation's scope or role, or the operation needs a different door.
- `404`: The resource or organization does not exist for this caller.
- `405`: This path takes another HTTP method, named in `Allow`.
- `409`: The request conflicts with current state or with prior use of its Idempotency-Key.
- `413`: The request, or the answer it asks for, is too large; narrow it.
- `429`: The credential's rate budget is spent; retry after `Retry-After` seconds.
- `500`: An unexpected server failure; retry later. Only `request_id` identifies it.
- `503`: A dependency is temporarily unavailable; retry after `Retry-After` seconds.
- `default`: Another status a product answers for its own refusal (for example `415` for an unsupported attachment); branch on `code`.

---

[API](https://skmtc.dev/point11/apis/point11-api.md) · [All operations](https://skmtc.dev/point11/apis/point11-api/llms.txt) · [OpenAPI document](https://skmtc.dev/point11/apis/point11-api/revisions/36a84c7aca11?raw)