Create Import

Current legacy imports HTTP operation. External credential scopes: write:records. Minimum farm role: EDITOR. Direct requests execute without an app confirmation screen. Production rate limit: 100 requests per 15-minute window per device account, 1000 per browser session, otherwise per client IP. RateLimit headers report the current window; respect Retry-After on 429. Known current limitation: upload middleware populates req.file while the handler expects req.files. A normal single-file upload returns 400 No file provided. This route is not a working import walkthrough; use import requests for supervised intake.