---
title: "Changes to Upload an attachment"
method: POST
path: "/attachments/"
---

# Changes to Upload an attachment

`POST /attachments/`

> Every recorded change to this operation, newest first.

## Timeline

Changed in 2 of 8 revisions.

- **2026-03-18** `e271d0e41f6d`: 3 breaking, 7 info
- **2026-02-03** `fc0a40f3b859`: 1 breaking, 4 warning, 7 info

## Changes

- **2026-03-18** `e271d0e41f6d`: 3 breaking, 7 info
  - request body became required
  - removed the media type `application/json` from the request body
  - removed the media type `application/x-www-form-urlencoded` from the request body
  - api operation id `post_attachments_` removed and replaced with `postAttachments`
  - the endpoint scheme security `XF-Api-Key` was added to the API
  - the endpoint scheme security `XF-OAuth2` was added to the API
  - added the new optional `header` request parameter `XF-Api-User` to all path's operations
  - added the new optional `query` request parameter `api_bypass_permissions` to all path's operations
  - added the media type `multipart/form-data` to the request body
  - removed the non-success response with the status `400`
- **2026-02-03** `fc0a40f3b859`: 1 breaking, 4 warning, 7 info
  - removed the media type `multipart/form-data` from the request body
  - the optional response header `XF-Latest-Api-Version` removed for the status `200`
  - the optional response header `XF-Request-User` removed for the status `200`
  - the optional response header `XF-Request-User-Extras` removed for the status `200`
  - the optional response header `XF-Used-Api-Version` removed for the status `200`
  - api operation id `postAttachments` removed and replaced with `post_attachments_`
  - the endpoint scheme security `XF-Api-Key` was removed from the API
  - the endpoint scheme security `XF-OAuth2` was removed from the API
  - request body became optional
  - added the media type `application/json` to the request body
  - added the media type `application/x-www-form-urlencoded` to the request body
  - added the non-success response with the status `400`

---

[Operation](https://skmtc.dev/xenforo-ltd/apis/xenforo-api/docs/attachments/post.md) - [API](https://skmtc.dev/xenforo-ltd/apis/xenforo-api.md) - [Page](https://skmtc.dev/xenforo-ltd/apis/xenforo-api/changes/attachments/post)