---
title: "Upload a private file (JPEG, PNG, WebP or PDF, checked by content)"
method: POST
path: "/api/v1/clients/{id}/uploads"
---

# Upload a private file (JPEG, PNG, WebP or PDF, checked by content)

`POST /api/v1/clients/{id}/uploads`

## Request

- Base URL: `http://127.0.0.1:4310`
- URL: `http://127.0.0.1:4310/api/v1/clients/{id}/uploads`
- Auth: one of:
  - HTTP bearer
  - API key in cookie `sfb_session`

## Path parameters

- `id` string, required

## Request body

- object
  - `filename` string
  - `content_type` 'image/jpeg' | 'image/png' | 'image/webp' | 'application/pdf', required
  - `data_base64` string, required: At most 160 KiB decoded. Content is checked against the declared type.
  - `note` string

## Response `201`

OK

- object

## Other responses

- `400`: Validation error
- `401`: Unauthenticated
- `403`: Forbidden
- `404`: Not found
- `409`: Conflict or invalid state

---

[API](https://skmtc.dev/scalingfirm/apis/tsf-booking-api.md) · [All operations](https://skmtc.dev/scalingfirm/apis/tsf-booking-api/llms.txt) · [OpenAPI document](https://skmtc.dev/scalingfirm/apis/tsf-booking-api/revisions/81704199cd37?raw)