---
title: "File upload requests"
description: "Collect a file from a customer or partner through a secure, time-limited upload link."
canonical: "https://studio.inttegro.com/api/file-uploads"
format: inttegro-machine-docs/v1
language: "TypeScript"
sdk_version: "v12.0.0"
reader_profile: optional
reader_manifest: "https://studio.inttegro.com/machine/typescript/readers/index.json"
reader_identification: "Optional: declare your client only if known and your current-session capabilities; use reader_manifest for supplemental recommendations."
preamble_estimated_tokens: 596
model_token_report: "https://studio.inttegro.com/machine/token-report.json"
preamble_questions: 5
preamble_source: "machine-only-decisions"
recommended_mcp_tools: ["upload_file"]
estimated_tokens: 8043
token_estimate_method: "utf8_bytes_divided_by_4"
---

## Machine preamble

**Summary:** Collect a file from a customer or partner through a secure, time-limited upload link. This TypeScript representation uses the selected SDK's native names wherever Studio has a verified mapping.

### Five questions

#### Q1. Is File upload requests the right source for this task?

Use this reference for collect a file from a customer or partner through a secure, time-limited upload link. Keep the four decision rules below with its exact operations and fields; do not infer a broader workflow from endpoint order.

#### Q2. What does “Use this API for an external uploader, not for a trusted server upload” require?

**Use this API for an external uploader, not for a trusted server upload.**
Your application creates one time-limited request for one file and shares its
upload link without sharing an API credential. For direct server uploads, use
[Files](https://studio.inttegro.com/machine/typescript/api/files.md).

#### Q3. What does “Do not stop at successful request creation” require?

**Do not stop at successful request creation.** Read [`uploadRequest.active`](https://typescript.inttegro.dev/v12.0.0)to determine whether the link can still accept a file and wait for a fulfilled
state with a resulting[`uploadRequest.fileId`](https://typescript.inttegro.dev/v12.0.0).

#### Q4. What does “Use attempt details to decide whether the same uploader can continue” require?

**Use attempt details to decide whether the same uploader can continue.** A
failed attempt does not necessarily mean the request itself is terminal;
inspect the attempt error, remaining attempt allowance, request status, and
expiry together.

#### Q5. What does “Continue with the file resource” require?

**Continue with the file resource.** Once fulfilled, use [Lookup a
file](https://studio.inttegro.com/machine/typescript/api/files.md#lookup-a-file) to verify availability and obtain the delivery
details appropriate to its purpose.

### Recommended MCP assistance

Use these through an authenticated Inttegro MCP connection. This document remains the contract source.

- [`upload_file`](https://studio.inttegro.com/machine/typescript/inttegro-mcp/tools.md#upload_file) — action; exact user confirmation required. Uploads canonical base64 file content up to 5 MiB and returns safe file metadata without echoing bytes or unrestricted custom data.

## Document content

# File upload requests

Upload requests let a customer, supplier, or other partner add a file to your Inttegro account through a secure, time-limited link. Your application creates the request and shares the link; the uploader sends the file directly to Inttegro without gaining access to your API credentials.

Use an upload request when someone outside your application needs to provide a product image, downloadable product, catalog import, video, or support document. Each request collects one file and produces a normal Inttegro file when the upload succeeds.

## Follow the upload-request handoff through to a usable file

The four decision rules are in the machine preamble above.

## The upload request object

An upload request records what file you expect, who should provide it, and whether it has arrived. New requests start as [`Inttegro.UploadRequestStatuses.Pending`](https://typescript.inttegro.dev/v12.0.0/variables/types_files.UploadRequestStatuses.html#pending); an accepted file changes the request to [`Inttegro.UploadRequestStatuses.Fulfilled`](https://typescript.inttegro.dev/v12.0.0/variables/types_files.UploadRequestStatuses.html#fulfilled) and sets [`uploadRequest.fileId`](https://typescript.inttegro.dev/v12.0.0). A request can instead become [`Inttegro.UploadRequestStatuses.Failed`](https://typescript.inttegro.dev/v12.0.0/variables/types_files.UploadRequestStatuses.html#failed), [`Inttegro.UploadRequestStatuses.Expired`](https://typescript.inttegro.dev/v12.0.0/variables/types_files.UploadRequestStatuses.html#expired), or [`Inttegro.UploadRequestStatuses.Canceled`](https://typescript.inttegro.dev/v12.0.0/variables/types_files.UploadRequestStatuses.html#canceled).

Use [`uploadRequest.active`](https://typescript.inttegro.dev/v12.0.0) to decide whether the link can still accept a file. When a request is fulfilled, retrieve the resulting file through [Lookup a file](https://studio.inttegro.com/machine/typescript/api/files.md#lookup-a-file).

### Properties

- [`active`](https://typescript.inttegro.dev/v12.0.0) — `boolean`

  Whether the request can still accept an upload.

- [`attempt`](https://typescript.inttegro.dev/v12.0.0)

  Most recent upload attempt. Lookup and upload responses include it after the uploader has tried to send a file.

  - [`attempt.attemptedAt`](https://typescript.inttegro.dev/v12.0.0) — `timestamp`

    When the upload attempt started.

  - [`attempt.contentType`](https://typescript.inttegro.dev/v12.0.0) — `string`

    Declared content type when present.

  - [`attempt.declaredSize`](https://typescript.inttegro.dev/v12.0.0) — `integer`

    Declared file size in bytes when present.

  - [`attempt.error`](https://typescript.inttegro.dev/v12.0.0) — `object`

    Why the file was not accepted and whether the uploader may try again.

  - [`attempt.failedAt`](https://typescript.inttegro.dev/v12.0.0) — `timestamp`

    When a failed attempt completed.

  - [`attempt.fileId`](https://typescript.inttegro.dev/v12.0.0) — `string`

    Resulting file ID after a successful attempt.

  - [`attempt.filename`](https://typescript.inttegro.dev/v12.0.0) — `string`

    Submitted filename when present.

  - [`attempt.id`](https://typescript.inttegro.dev/v12.0.0) — `string`

    Unique attempt identifier.

  - [`attempt.ordinal`](https://typescript.inttegro.dev/v12.0.0) — `integer`

    One-based attempt number for the request.

  - [`attempt.review`](https://typescript.inttegro.dev/v12.0.0) — `object`

    Your approval or rejection of the uploaded file, when reviewed.

  - [`attempt.status`](https://typescript.inttegro.dev/v12.0.0) — `string`

    Attempt status such as `"succeeded"` or `"failed"`.

  - [`attempt.succeededAt`](https://typescript.inttegro.dev/v12.0.0) — `timestamp`

    When a successful attempt completed.

  - [`attempt.uploadRequestId`](https://typescript.inttegro.dev/v12.0.0) — `string`

    Upload-request ID that owns the attempt.

- [`attempts`](https://typescript.inttegro.dev/v12.0.0)

  Upload-attempt limit and current counts.

  - [`attempts.attemptCount`](https://typescript.inttegro.dev/v12.0.0) — `integer`

    Total upload attempts recorded for this request.

  - [`attempts.failedAttemptCount`](https://typescript.inttegro.dev/v12.0.0) — `integer`

    How many upload attempts have failed validation or fulfillment.

  - [`attempts.lastAttemptedAt`](https://typescript.inttegro.dev/v12.0.0) — `timestamp`

    When the most recent upload attempt happened.

  - [`attempts.maxAttempts`](https://typescript.inttegro.dev/v12.0.0) — `integer`

    Maximum number of allowed failed attempts.

- [`canceledAt`](https://typescript.inttegro.dev/v12.0.0) — `timestamp`

  When the request was canceled. Returned only after cancellation.

- [`canceledBy`](https://typescript.inttegro.dev/v12.0.0)

  Person or system that canceled the request. Present only after cancellation.

  - [`canceledBy.email`](https://typescript.inttegro.dev/v12.0.0) — `string`

    Actor email when available.

  - [`canceledBy.id`](https://typescript.inttegro.dev/v12.0.0) — `string`

    Actor ID when available.

  - [`canceledBy.name`](https://typescript.inttegro.dev/v12.0.0) — `string`

    Actor display name when available.

  - [`canceledBy.service`](https://typescript.inttegro.dev/v12.0.0) — `string`

    Service name when the request was canceled by an automated workflow.

  - [`canceledBy.type`](https://typescript.inttegro.dev/v12.0.0) — `string`

    Kind of actor that canceled the request.

- [`constraints`](https://typescript.inttegro.dev/v12.0.0)

  Optional file requirements that are stricter than the selected purpose.

  - [`constraints.contentTypes`](https://typescript.inttegro.dev/v12.0.0) — `array`

    Optional narrowed allow-list of MIME types.

  - [`constraints.exactSize`](https://typescript.inttegro.dev/v12.0.0) — `integer`

    Optional exact file size in bytes.

  - [`constraints.extensions`](https://typescript.inttegro.dev/v12.0.0) — `array`

    Optional narrowed allow-list of filename extensions.

  - [`constraints.filename`](https://typescript.inttegro.dev/v12.0.0) — `string`

    Optional exact filename requirement.

  - [`constraints.maxSize`](https://typescript.inttegro.dev/v12.0.0) — `integer`

    Optional maximum file size in bytes.

  - [`constraints.minSize`](https://typescript.inttegro.dev/v12.0.0) — `integer`

    Optional minimum file size in bytes.

- [`createdAt`](https://typescript.inttegro.dev/v12.0.0) — `timestamp`

  When the upload request was created.

- [`customData`](https://typescript.inttegro.dev/v12.0.0) — `object`

  Optional string key-value custom data copied to the resulting file.

- [`display`](https://typescript.inttegro.dev/v12.0.0)

  Human-facing copy shown to the uploader.

  - [`display.description`](https://typescript.inttegro.dev/v12.0.0) — `string`

    Optional longer explanation of what should be uploaded.

  - [`display.helpText`](https://typescript.inttegro.dev/v12.0.0) — `string`

    Optional supporting guidance for the uploader.

  - [`display.title`](https://typescript.inttegro.dev/v12.0.0) — `string`

    Short title for the upload prompt.

- [`expiredAt`](https://typescript.inttegro.dev/v12.0.0) — `timestamp`

  When the request was marked expired. Returned only after expiry is recorded.

- [`expiresAt`](https://typescript.inttegro.dev/v12.0.0) — `timestamp`

  When the public upload URL stops accepting uploads.

- [`fileId`](https://typescript.inttegro.dev/v12.0.0) — `string`

  Resulting file ID after a successful upload. Omitted until fulfillment succeeds.

- [`fulfilledAt`](https://typescript.inttegro.dev/v12.0.0) — `timestamp`

  When a valid upload produced the file. Returned only after fulfillment succeeds.

- [`id`](https://typescript.inttegro.dev/v12.0.0) — `string`

  Unique upload-request identifier. IDs begin with `uplreq_`.

- [`latestError`](https://typescript.inttegro.dev/v12.0.0)

  Most recent validation or fulfillment error.

  - [`latestError.at`](https://typescript.inttegro.dev/v12.0.0) — `timestamp`

    When the error was recorded.

  - [`latestError.code`](https://typescript.inttegro.dev/v12.0.0) — `string`

    Stable error code for the failure.

  - [`latestError.message`](https://typescript.inttegro.dev/v12.0.0) — `string`

    Human-readable error message.

  - [`latestError.param`](https://typescript.inttegro.dev/v12.0.0) — `string`

    Request field associated with the error when available.

  - [`latestError.retryable`](https://typescript.inttegro.dev/v12.0.0) — `boolean`

    Whether the uploader can try again.

- [`metadata`](https://typescript.inttegro.dev/v12.0.0) — `object`

  Additional read-only details supplied by Inttegro. Use [`uploadRequest.customData`](https://typescript.inttegro.dev/v12.0.0) for your own data.

- [`purpose`](https://typescript.inttegro.dev/v12.0.0) — `string`

  File purpose the upload must satisfy:`"product_download"` accepts PDF, ZIP, text, and CSV files up to 100 MiB.
  `"product_image"` accepts JPEG, PNG, and GIF images up to 10 MiB.
  `"product_video"` accepts MP4, WebM, and QuickTime video up to 250 MiB.
  `"products_import"` accepts a CSV catalog import up to 32 MiB and 10,000 product rows.
  `"support_document"` accepts PDF, JPEG, PNG, and text files up to 25 MiB.

- [`recipient`](https://typescript.inttegro.dev/v12.0.0)

  Person expected to provide the file, when you want that context on the request.

  - [`recipient.email`](https://typescript.inttegro.dev/v12.0.0) — `string`

    Recipient email when available.

  - [`recipient.id`](https://typescript.inttegro.dev/v12.0.0) — `string`

    Recipient ID when available.

  - [`recipient.name`](https://typescript.inttegro.dev/v12.0.0) — `string`

    Recipient display name when available.

  - [`recipient.type`](https://typescript.inttegro.dev/v12.0.0) — `string`

    Recipient type such as `"customer"`, `"email"`, or `"user"`.

- [`requester`](https://typescript.inttegro.dev/v12.0.0)

  Person or system that created the request. Inttegro identifies the caller from the API key unless you supply additional details.

  - [`requester.email`](https://typescript.inttegro.dev/v12.0.0) — `string`

    Actor email when available.

  - [`requester.id`](https://typescript.inttegro.dev/v12.0.0) — `string`

    Actor ID when available.

  - [`requester.name`](https://typescript.inttegro.dev/v12.0.0) — `string`

    Actor display name when available.

  - [`requester.service`](https://typescript.inttegro.dev/v12.0.0) — `string`

    Service name when the request came from an automated workflow.

  - [`requester.type`](https://typescript.inttegro.dev/v12.0.0) — `string`

    Kind of actor that created the request.

- [`resource`](https://typescript.inttegro.dev/v12.0.0)

  Order, product, case, or other resource that needs the file.

  - [`resource.id`](https://typescript.inttegro.dev/v12.0.0) — `string`

    Resource ID.

  - [`resource.name`](https://typescript.inttegro.dev/v12.0.0) — `string`

    Resource name when available.

  - [`resource.type`](https://typescript.inttegro.dev/v12.0.0) — `string`

    Resource type.

- [`status`](https://typescript.inttegro.dev/v12.0.0) — `string`

  Upload-request lifecycle status: [`Inttegro.UploadRequestStatuses.Pending`](https://typescript.inttegro.dev/v12.0.0/variables/types_files.UploadRequestStatuses.html#pending), [`Inttegro.UploadRequestStatuses.Uploading`](https://typescript.inttegro.dev/v12.0.0/variables/types_files.UploadRequestStatuses.html#uploading), [`Inttegro.UploadRequestStatuses.Fulfilled`](https://typescript.inttegro.dev/v12.0.0/variables/types_files.UploadRequestStatuses.html#fulfilled), [`Inttegro.UploadRequestStatuses.Expired`](https://typescript.inttegro.dev/v12.0.0/variables/types_files.UploadRequestStatuses.html#expired), [`Inttegro.UploadRequestStatuses.Canceled`](https://typescript.inttegro.dev/v12.0.0/variables/types_files.UploadRequestStatuses.html#canceled), or [`Inttegro.UploadRequestStatuses.Failed`](https://typescript.inttegro.dev/v12.0.0/variables/types_files.UploadRequestStatuses.html#failed).

- [`subject`](https://typescript.inttegro.dev/v12.0.0)

  Person or resource that the requested file is about.

  - [`subject.email`](https://typescript.inttegro.dev/v12.0.0) — `string`

    Subject email when available.

  - [`subject.id`](https://typescript.inttegro.dev/v12.0.0) — `string`

    Subject ID when available.

  - [`subject.name`](https://typescript.inttegro.dev/v12.0.0) — `string`

    Subject display name when available.

  - [`subject.type`](https://typescript.inttegro.dev/v12.0.0) — `string`

    Subject type such as `"customer"`, `"case"`, or `"user"`.

- [`updatedAt`](https://typescript.inttegro.dev/v12.0.0) — `timestamp`

  When the upload request was last updated.

- [`uploadUrl`](https://typescript.inttegro.dev/v12.0.0) — `string`

  Secure upload link returned only when you create the request. Share it only with the intended uploader; lookup, page, and cancel responses do not return it again.

- [`uploadingAt`](https://typescript.inttegro.dev/v12.0.0) — `timestamp`

  When an upload attempt moved into active fulfillment. Returned only while or after an upload attempt has started.

When an attempt has been reviewed, [`uploadRequest.attempt.review`](https://typescript.inttegro.dev/v12.0.0) records the decision, the review time, an optional message for the uploader, and any structured reasons.

For `"products_import"`, every nonblank data row must contain at least these columns in order: `name`, `type`, `price_currency`, `price_value`, `reference`, `description`, `about`, `category`, `tax_code`, `unit_dimension`, `price_label`, `publish`, and `attributes`. An optional first header row may use those names in the same order. The file must contain between 1 and 10,000 data rows.

## Create an upload request

Create an upload request when another person or system should send the file directly to Inttegro. The response includes a secure [`uploadRequest.uploadUrl`](https://typescript.inttegro.dev/v12.0.0) that you can place behind a button, send in a message, or hand to another trusted system.

The `purpose` sets the kinds and maximum size of file Inttegro accepts. Use `constraints` only when this particular request should be stricter—for example, to accept only PDF support documents under 10 MiB.

### Request body

- `attempts` — wire-only

  Optional limit on failed upload attempts.

  - `attempts.max_attempts` — `integer` — wire-only

    Maximum number of allowed failed attempts. Defaults to `3`.

- `constraints` — `Constraints`

  Optional requirements for this upload. These can narrow, but not widen, the selected purpose.

  - `constraints.contentTypes` — `string[]`

    Optional narrowed allow-list of MIME types.

  - `constraints.exactSize` — `number`

    Optional exact file size in bytes.

  - `constraints.extensions` — `string[]`

    Optional narrowed allow-list of filename extensions.

  - `constraints.filename` — `string`

    Optional exact filename requirement.

  - `constraints.maxSize` — `number`

    Optional maximum file size in bytes.

  - `constraints.minSize` — `number`

    Optional minimum file size in bytes.

- `customData` — `Data`

  Optional string key-value data for your own reconciliation. Inttegro copies it to the resulting file. The object can be at most 25 KiB and each key at most 256 characters.

- `display` — `Display`

  Optional uploader-facing copy.

  - `display.description` — `string`

    Optional longer description of what to upload.

  - `display.helpText` — `string`

    Optional supporting guidance for the uploader.

  - `display.title` — `string`

    Short title for the upload prompt.

- `expiresAt` — `Time`

  Optional RFC 3339 expiry. The default is 24 hours from creation.

- `purpose` — `string` — required

  File purpose the upload must satisfy.

- `recipient` — `Party`

  Optional uploader identity details.

  - `recipient.email` — `string`

    Recipient email when available.

  - `recipient.id` — `string`

    Recipient ID when available.

  - `recipient.name` — `string`

    Recipient display name when available.

  - `recipient.type` — `string`

    Recipient type.

- `requester` — `Actor`

  Optional details about the person or system creating the request. Normally, Inttegro identifies the caller from the API key.

  - `requester.email` — `string`

    Actor email when available.

  - `requester.id` — `string`

    Actor ID when available.

  - `requester.name` — `string`

    Actor display name when available.

  - `requester.type` — `string`

    Actor type.

- `resource` — `FileResource`

  Optional Inttegro resource or workflow that needs the file.

  - `resource.id` — `string`

    Resource ID.

  - `resource.name` — `string`

    Resource name when available.

  - `resource.type` — `string`

    Resource type.

- `subject` — `Party`

  Optional person or Inttegro object the requested file is about.

  - `subject.email` — `string`

    Subject email when available.

  - `subject.id` — `string`

    Subject ID when available.

  - `subject.name` — `string`

    Subject display name when available.

  - `subject.type` — `string`

    Subject type.

### Upload limits

- The link expires after 24 hours unless you provide a future `expiresAt`.
- The uploader gets three failed attempts unless you set `attempts.max_attempts`.
- File sizes are measured in bytes. Any minimum, maximum, or exact size must fit within the selected purpose's limit.
- Content types, extensions, and an exact filename can make a request more restrictive, but they cannot permit a file that the selected purpose rejects.

### Response

Returns the new upload request and its [`uploadRequest.uploadUrl`](https://typescript.inttegro.dev/v12.0.0). Save the URL when you create the request because Inttegro does not return it again through lookup, page, or cancel.

Treat the URL like a temporary secret: anyone who has the complete URL can upload against the request. Use a stable idempotency key when retrying this call so that a network failure does not create multiple live links for the same upload.

**Request — POST /upload\_requests/create**

```typescript
import * as Inttegro from '@inttegro/inttegro-sdk'

const inttegro = new Inttegro.InttegroClient({
  apiKey: process.env.INTTEGRO_API_KEY!,
})
const result = await inttegro.uploadRequests.create({
  purpose: "support_document",
  constraints: {
    contentTypes: [
      "application/pdf",
    ],
    maxSize: 10485760,
  },
  display: {
    title: "Upload dispute evidence",
    helpText: "Attach a PDF under 10 MB.",
  },
  recipient: {
    type: "customer",
    email: "ama@example.com",
  },
  resource: {
    type: "dispute",
    id: "disp_123",
  },
  customData: {
    case_id: "CASE-1001",
  },
  expiresAt: new Date("2030-07-06T12:30:00Z"),
}, {
  idempotencyKey: "support-doc-upload-001",
})
```

```json
{
  "upload_request": {
    "id": "uplreq_1gK9pQ4vL8mN2sT5wX7yZ0",
    "purpose": "support_document",
    "status": "pending",
    "active": true,
    "upload_url": "<UPLOAD_URL>",
    "constraints": {
      "content_types": ["application/pdf"],
      "max_size": 10485760
    },
    "display": {
      "help_text": "Attach a PDF under 10 MB.",
      "title": "Upload dispute evidence"
    },
    "subject": {},
    "recipient": { "type": "customer", "email": "ama@example.com" },
    "resource": { "type": "dispute", "id": "disp_123" },
    "requester": { "type": "api_key" },
    "attempts": {
      "max_attempts": 3,
      "attempt_count": 0,
      "failed_attempt_count": 0
    },
    "custom_data": { "case_id": "CASE-1001" },
    "created_at": "2026-06-05T12:30:00Z",
    "updated_at": "2026-06-05T12:30:00Z",
    "expires_at": "2030-07-06T12:30:00Z"
  }
}
```

## Fulfill an upload request

Send the file as `multipart/form-data` to the complete upload link returned when the request was created. This call is made by the uploader and does not use your application's API key; the secure values needed to accept the upload are already part of the URL.

Use the URL exactly as returned. Do not extract, log, or reconstruct its query parameters.

### Included in the upload URL

- `id` — `string` — required — wire-only

  Identifies the upload request. It is already present in the generated upload
  link.

- `token` — `string` — required — wire-only

  Authorizes the upload. It is already present in the generated upload link
  and must remain private.

### Request body

- `file` — `file` — required — wire-only

  File selected by the uploader.

### Response

Returns the fulfilled upload request and a file receipt containing the resulting [`file.id`](https://typescript.inttegro.dev/v12.0.0). Your authenticated backend can pass that ID to [Lookup a file](https://studio.inttegro.com/machine/typescript/api/files.md#lookup-a-file) when it needs the complete file object.

If Inttegro rejects the file, the response includes an error and the failed attempt. Check `error.retryable` before offering another try. A retryable failure leaves the request pending while attempts remain; otherwise, create a new upload request.

Expired, canceled, fulfilled, and exhausted requests no longer accept uploads.

**Request — POST /upload\_requests/upload**

```typescript
import * as Inttegro from '@inttegro/inttegro-sdk'

const inttegro = new Inttegro.InttegroClient({
  apiKey: process.env.INTTEGRO_API_KEY!,
})
const result = await inttegro.uploadRequests.fulfill({
  uploadUrl: '<UPLOAD_URL>',
  file: './evidence.pdf',
})
```

## Lookup an upload request

Retrieve an upload request when you need its current status or the result of the uploader's latest attempt. After fulfillment, [`uploadRequest.fileId`](https://typescript.inttegro.dev/v12.0.0) identifies the file Inttegro created.

### Request body

- `id` — `string` — required

  Upload-request ID to retrieve.

### Response

Returns the upload request and its latest attempt, when one exists. The response does not include [`uploadRequest.uploadUrl`](https://typescript.inttegro.dev/v12.0.0); retain that URL only for as long as the intended uploader needs it.

**Request — POST /upload\_requests/lookup**

```typescript
import * as Inttegro from '@inttegro/inttegro-sdk'

const inttegro = new Inttegro.InttegroClient({
  apiKey: process.env.INTTEGRO_API_KEY!,
})
const result = await inttegro.uploadRequests.lookup({
  id: "uplreq_1gK9pQ4vL8mN2sT5wX7yZ0",
})
```

## Review an upload attempt

Approve or reject the latest upload attempt after your application has checked the file itself—for example, after confirming that a document is readable or contains the requested evidence. Approval keeps a successful request fulfilled. Rejection reopens it for a replacement when another attempt is available.

### Request body

- `attemptId` — `string`

  Attempt ID to review. Supply exactly one of `attemptId`
  or
  `attemptOrdinal`.

- `attemptOrdinal` — `number`

  One-based attempt number to review. Supply exactly one of
  `attemptId` or
  `attemptOrdinal`.

- `decision` — `string(UploadReviewDecision)` — required

  Review decision: [`Inttegro.UploadReviewDecisions.Approved`](https://typescript.inttegro.dev/v12.0.0/variables/types_files.UploadReviewDecisions.html#approved)
  or [`Inttegro.UploadReviewDecisions.Rejected`](https://typescript.inttegro.dev/v12.0.0/variables/types_files.UploadReviewDecisions.html#rejected).

- `id` — `string` — required

  Upload-request ID that owns the attempt.

- `publicMessage` — `string`

  Optional explanation suitable for showing to the uploader.

- `reasons` — `ReviewReason[]`

  Optional structured reasons for the decision.

  - `reasons.code` — `string`

    Required stable reason code.

  - `reasons.message` — `string`

    Required customer-safe explanation.

  - `reasons.param` — `string`

    Optional field associated with the reason.

Only the latest attempt can be reviewed. You can approve only a successful attempt, and you cannot review a canceled or expired request. Use `publicMessage` and `reasons` for explanations that are safe to show to the uploader.

### Response

Returns the updated upload request with the reviewed attempt. Use an idempotency key when submitting a review so a retry cannot record the decision twice.

**Request — POST /upload\_requests/review**

```typescript
import * as Inttegro from '@inttegro/inttegro-sdk'

const inttegro = new Inttegro.InttegroClient({
  apiKey: process.env.INTTEGRO_API_KEY!,
})
const result = await inttegro.uploadRequests.review({
  id: "uplreq_1gK9pQ4vL8mN2sT5wX7yZ0",
  attemptOrdinal: 1,
  decision: Inttegro.UploadReviewDecisions.Rejected,
  reasons: [
    {
      code: "document_unreadable",
      message: "The document is too blurry to read.",
    },
  ],
  publicMessage: "Please upload a clearer copy.",
}, {
  idempotencyKey: "review-upload-attempt-001",
})
```

## Page upload requests

List upload requests when you need to find outstanding uploads, recent fulfillments, or requests associated with a particular order, product, case, or other resource.

### Request body

- `pageNumber` — `number`

  Page number to retrieve. Defaults to `1`.

- `pageSize` — `number`

  Requested number of upload requests per page. Defaults to `25` and is capped at `256`.

- `purpose` — `string`

  Optional purpose filter.

- `resource` — `FileResource`

  Optional resource filter.

  - `resource.id` — `string`

    Resource ID.

  - `resource.name` — `string`

    Resource name when available.

  - `resource.type` — `string`

    Resource type.

- `status` — `string`

  Optional status filter: [`Inttegro.UploadRequestStatuses.Pending`](https://typescript.inttegro.dev/v12.0.0/variables/types_files.UploadRequestStatuses.html#pending), [`Inttegro.UploadRequestStatuses.Uploading`](https://typescript.inttegro.dev/v12.0.0/variables/types_files.UploadRequestStatuses.html#uploading), [`Inttegro.UploadRequestStatuses.Fulfilled`](https://typescript.inttegro.dev/v12.0.0/variables/types_files.UploadRequestStatuses.html#fulfilled), [`Inttegro.UploadRequestStatuses.Expired`](https://typescript.inttegro.dev/v12.0.0/variables/types_files.UploadRequestStatuses.html#expired), [`Inttegro.UploadRequestStatuses.Canceled`](https://typescript.inttegro.dev/v12.0.0/variables/types_files.UploadRequestStatuses.html#canceled), or [`Inttegro.UploadRequestStatuses.Failed`](https://typescript.inttegro.dev/v12.0.0/variables/types_files.UploadRequestStatuses.html#failed).

### Response

Returns a page with [`page.uploadRequests`](https://typescript.inttegro.dev/v12.0.0), [`page.number`](https://typescript.inttegro.dev/v12.0.0), and [`page.size`](https://typescript.inttegro.dev/v12.0.0). Page items omit the latest attempt; use [Lookup an upload request](#lookup-an-upload-request) when you need an attempt or its validation error. An empty page has an empty [`page.uploadRequests`](https://typescript.inttegro.dev/v12.0.0) collection and [`page.size`](https://typescript.inttegro.dev/v12.0.0) set to `0`.

**Request — POST /upload\_requests/page**

```typescript
import * as Inttegro from '@inttegro/inttegro-sdk'

const inttegro = new Inttegro.InttegroClient({
  apiKey: process.env.INTTEGRO_API_KEY!,
})
const result = await inttegro.uploadRequests.page({
  purpose: "support_document",
  status: "pending",
  pageNumber: 1,
  pageSize: 25,
})
```

## Cancel an upload request

Cancel a request when you no longer need the file or when you have issued a replacement link. Its upload URL stops working immediately.

### Request body

- `canceledBy` — `Actor`

  Optional actor canceling the request.

  - `canceledBy.email` — `string`

    Actor email when available.

  - `canceledBy.id` — `string`

    Actor ID when available.

  - `canceledBy.name` — `string`

    Actor display name when available.

  - `canceledBy.type` — `string`

    Actor type.

- `id` — `string` — required

  Upload-request ID to cancel.

### Response

Returns the request with [`uploadRequest.status`](https://typescript.inttegro.dev/v12.0.0) set to [`Inttegro.UploadRequestStatuses.Canceled`](https://typescript.inttegro.dev/v12.0.0/variables/types_files.UploadRequestStatuses.html#canceled). Use a stable idempotency key when retrying the cancellation.

**Request — POST /upload\_requests/cancel**

```typescript
import * as Inttegro from '@inttegro/inttegro-sdk'

const inttegro = new Inttegro.InttegroClient({
  apiKey: process.env.INTTEGRO_API_KEY!,
})
const result = await inttegro.uploadRequests.cancel({
  id: "uplreq_1gK9pQ4vL8mN2sT5wX7yZ0",
  canceledBy: {
    type: "user",
    id: "usr_support_123",
  },
}, {
  idempotencyKey: "cancel-upload-request-001",
})
```