Work with files
Files in Inttegro are durable assets with stable file_... IDs. Instead of scattering raw storage URLs across your products and support flows, you upload bytes once, keep the returned file ID, and let Inttegro control access, sharing, and lifecycle. This guide shows you when to upload directly, when to delegate uploads, how to share files safely, and which file-specific failures you should plan for.
An authenticated AI agent can upload base64 file content up to 5 MiB or create and revoke a public file link after your confirmation. Delegated upload requests still use the Files API; keep bearer upload and link URLs with their intended recipients.
MCP tools: upload_file, create_file_link or revoke_file_link
Confirmed MCP actions require explicit form confirmation before Inttegro changes state.
Prerequisites
- A file purpose chosen before upload:
-
"product_download"for downloadable product assets. -
"product_image"for product images. -
"product_video"for product videos. -
"products_import"for product-catalog CSV imports with the required import schema and no more than 10,000 data rows. -
"support_document"for support attachments and evidence.
-
- A plan for where the resulting file ID will live. Product media should store returned file IDs via Create a product or Update a product, not raw third-party URLs.
Choose the right workflow
| Need | Use | Why |
|---|---|---|
| Your backend already has the bytes | Upload a file | Multipart upload from your server. |
| A customer, supplier, or reviewer should send the file themselves | Create an upload request | Inttegro returns a purpose-bound upload URL for one delegated upload. |
| You need revocable public access to a stored file | Create a file link | Inttegro gives you a time-boxed or access-limited public URL. |
Use Download file contents when delivery should stay behind your own server. Stream delivery returns the bytes in the authenticated response; redirect delivery returns a short-lived download URL in the Location header. This is the right delivery path for "product_download", "products_import", and "support_document", because file links only support "product_image" and "product_video".
Send bytes to Inttegro
Choose the upload path that matches who is actually holding the file.
- Server upload
- Delegated upload
Use direct upload when your backend already has the bytes—for example, when an internal admin tool uploads product artwork or when your own service is syncing downloadable assets.
Upload from your server
import * as Inttegro from '@inttegro/inttegro-sdk'
const inttegro = new Inttegro.InttegroClient({
apiKey: process.env.INTTEGRO_API_KEY!,
})
const result = await inttegro.files.create({
file: "./hero.png",
purpose: "product_image",
title: "Hero image",
customData: {
product_ref: "SKU-12345",
},
}, {
idempotencyKey: "upload-hero-image-001",
})
Use customData for your own string key-value data. metadata is returned by the API and cannot be supplied.
The response gives you a stable id. Store that ID on the Inttegro resource that needs the asset.
Use delegated upload when someone outside your backend should provide the file. Your server creates the request, then passes the returned uploadUrl to the uploader.
Create an upload request
import * as Inttegro from '@inttegro/inttegro-sdk'
const inttegro = new Inttegro.InttegroClient({
apiKey: process.env.INTTEGRO_API_KEY!,
})
const result = await inttegro.uploadRequests.create({
purpose: "support_document",
constraints: {
maxSize: 10485760,
contentTypes: [
"application/pdf",
],
extensions: [
".pdf",
],
},
display: {
title: "Upload proof of purchase",
helpText: "Attach the PDF receipt from your order confirmation.",
},
recipient: {
type: Inttegro.ChimeRecipientTypes.Email,
},
resource: {
type: "case",
id: "case_123",
},
expiresAt: new Date("2030-06-06T12:30:00Z"),
})
The request expires after 24 hours unless you set a future expiresAt, and permits three failed attempts unless you set attempts.maxAttempts. Size values must be nonnegative and remain within the selected purpose; MIME types, extensions, and an exact filename can only narrow that purpose. See Create an upload request for the complete validation rules.
Store the returned uploadUrl securely and give it only to the uploader. It is returned once by create and is not returned by lookup, page, or cancel. Have the uploader send multipart/form-data directly to Fulfill an upload request.
Share files safely
File links are for controlled public access. They work for "product_image" and "product_video", and they let you set delivery behavior, expiry, and access limits.
The inline example keeps access.allowDownload set to true because attachment disposition is valid only when downloads are allowed. File links expire after 24 hours by default, and access.maxAccesses set to 0 means unlimited successful opens.
Create a public file link
import * as Inttegro from '@inttegro/inttegro-sdk'
const inttegro = new Inttegro.InttegroClient({
apiKey: process.env.INTTEGRO_API_KEY!,
})
const result = await inttegro.fileLinks.create({
fileId: "file_4q6YcQk1RzPv2mDa8nFw0sHu",
delivery: {
mode: "inline",
},
access: {
allowDownload: true,
maxAccesses: 25,
},
expiresAt: new Date("2030-06-06T12:30:00Z"),
})
Give the returned top-level url to the consumer. They open that URL via Open a file link. If access should end early, revoke it with Revoke a file link.
Attach file IDs to products
Treat Inttegro file IDs as the contract between your product catalog and stored media.
- Use
"product_image"for hero images and galleries. - Use
"product_video"for product videos you may want to share publicly. - Use
"product_download"for downloadable assets delivered after purchase. - Use
"products_import"only for CSV product-catalog imports. The file must follow the required import schema, contain no more than 10,000 data rows, and stay within 32 MiB.
Store the returned file IDs on your product records through Create a product or Update a product. Do not save temporary upload URLs, local filenames, or third-party CDN URLs as your source of truth. That breaks lifecycle controls, makes deletions harder, and bypasses the purpose validation you applied at upload time.
Handle file-specific failures
File APIs return stable error codes. Use Error Codes to decide whether to ask for a different file, retry later, refresh an expired public URL, or clean up the resource that still references the file.
Related resources
- Upload a file - Multipart upload from your own backend.
- Download file contents - Server-side delivery for any stored file.
- Create a file link - Revocable public access for linkable files.
- Create an upload request - Delegated upload for customers or external partners.
- Update a product - Store returned file IDs on product records.