Skip to main content
POST
Upload through the token that is already in your event. Best mid-workflow, in n8n or Make, where the response_url is already mapped and there is no key to manage. Read back file.file_id, then use it in an image, file or card block.

Path parameters

string
required
The token baked into the event’s response_url. The upload URL is that URL plus /files.

Body

multipart/form-data.
file
required
The file itself. Missing it returns 400 MALFORMED_MULTIPART.
string
Replaces the file’s own name. Cut to 255 characters.

Response

boolean
true on success.
object
The stored file.

What we accept

Images (PNG, JPEG, GIF, WebP, AVIF) up to 10 MB, everything else up to 25 MB. We read the file’s first bytes to decide what it is; the name and Content-Type are never trusted. Images are converted to WebP and only that copy is kept. Programs and HTML are blocked, and HEIC is refused. Full detail in Sending files.

Errors