How it works
Requires runs:start or requester access and Idempotency-Key. Flow version must be published and document field/type/size configured. PUT the actual file bytes to upload.url, sending every upload.headers value exactly. Do not send your flow2act token to S3. Upload capability does not grant read access. SHA-256 is lowercase hexadecimal over the exact file bytes; S3 validates the signed checksum and a conditional write prevents overwrites. Retrying the same reservation may refresh its transient upload URL.
Request body
flowVersionIdstringrequireduuidfieldKeystringrequiredfileNamestringrequiredmin length 1 · max length 180contentTypestringrequiredapplication/pdf | image/png | image/jpeg | application/vnd.openxmlformats-officedocument.wordprocessingml.documentsizeintegerrequiredmin 1 · max 26214400sha256stringrequiredRequest essentials
- Authorization
- Bearer $FLOW2ACT_API_KEY
- X-Organization-Id
- Your workspace UUID
- Idempotency-Key
- Stable per operation; 8–128 characters

