Uploads content and registers metadata in one multipart request with two parts: a JSON metadata part and the file part. At least one CUSTOMER or LOAN link is required. The server derives the checksum and content type; content is virus-scanned before it can be downloaded, and rejected content is quarantined and deleted. Marking a document sensitive requires the sensitive read permission.
Path & query parameters
Field
Type
Description
Idempotency-Keyrequiredin header
string
Stable key for this one logical mutation. Reuse it for retries; reusing it with a different request returns 409.
Multipart body parameters
Field
Type
Description
metadatarequired
object
JSON metadata part.
title
string
documentType
string
sensitive
boolean
links
array<object>
filerequired
string
Content bytes; the server derives the checksum and content type.