# Upload a media

> Upload a file to create a media.

`POST /rest/api/medias`

Creates a Media resource.

Creates a media by uploading a file. This endpoint takes a `multipart/form-data` body (not JSON): send the binary in a `file` field. The response describes the stored media - its `contentUrl`, `mimeType`, derived `type`, `hash` and, for images, `dimensions`.

> **File size limits**
>
> Up to 5 MB for general files and 100 MB for videos. The `mimeType`, `type` and `hash` are derived from the uploaded file.

## Headers

| Name                         | Type     | Required | Description                                                                                                                                      |
| ---------------------------- | -------- | -------- | ------------------------------------------------------------------------------------------------------------------------------------------------ |
| `X-Flowkiwi-Organization-Id` | `string` | Yes      | The organization the request acts as. Determines the identity, permissions and ownership applied when reading or modifying data on the instance. |

## Request body

| Property | Type     | Required | Description                                                   |
| -------- | -------- | -------- | ------------------------------------------------------------- |
| `file`   | `string` | -        | Upload file (max size: 5M for general files, 100M for videos) |

## Response

**201** - Media resource created

| Property     | Type                                     | Required | Description                                           |
| ------------ | ---------------------------------------- | -------- | ----------------------------------------------------- |
| `@context`   | `object`                                 | -        |                                                       |
| `@id`        | `string`                                 | Yes      |                                                       |
| `@type`      | `string`                                 | Yes      |                                                       |
| `id`         | `string`                                 | -        | The resource's unique identifier (UUID).              |
| `contentUrl` | `string \| null`                         | -        | The URL to fetch the uploaded file.                   |
| `mimeType`   | `string \| null`                         | -        | MIME type of the file                                 |
| `type`       | `"image" \| "video" \| "file"`           | -        | Media type based on MIME type (image, video, or file) |
| `hash`       | `string \| null`                         | -        | SHA256 hash of the file                               |
| `dimensions` | `EmbeddedImageDimensionResource \| null` | -        |                                                       |
| `createdAt`  | `string \| null`                         | -        |                                                       |
| `updatedAt`  | `string \| null`                         | -        |                                                       |

## Errors

**400** - Invalid input

| Property   | Type             | Required | Description                                                                                                                          |
| ---------- | ---------------- | -------- | ------------------------------------------------------------------------------------------------------------------------------------ |
| `@context` | `object`         | -        |                                                                                                                                      |
| `@id`      | `string`         | Yes      |                                                                                                                                      |
| `@type`    | `string`         | Yes      |                                                                                                                                      |
| `title`    | `string \| null` | -        | A short, human-readable summary of the problem.                                                                                      |
| `detail`   | `string \| null` | -        | A human-readable explanation specific to this occurrence of the problem.                                                             |
| `status`   | `number \| null` | -        |                                                                                                                                      |
| `instance` | `string \| null` | -        | A URI reference that identifies the specific occurrence of the problem. It may or may not yield further information if dereferenced. |
| `type`     | `string`         | -        | A URI reference that identifies the problem type                                                                                     |

**403** - Access denied. The caller is missing one or more identity permissions required for this operation.

| Property             | Type       | Required | Description                                                                                                                                |
| -------------------- | ---------- | -------- | ------------------------------------------------------------------------------------------------------------------------------------------ |
| `@context`           | `object`   | -        |                                                                                                                                            |
| `@id`                | `string`   | Yes      |                                                                                                                                            |
| `@type`              | `string`   | Yes      |                                                                                                                                            |
| `type`               | `string`   | -        |                                                                                                                                            |
| `title`              | `string`   | -        |                                                                                                                                            |
| `status`             | `integer`  | -        |                                                                                                                                            |
| `detail`             | `string`   | -        |                                                                                                                                            |
| `missingPermissions` | `string[]` | -        | Identity permissions that the caller is missing for this operation. Present only when the 403 is caused by a denied identity:* permission. |

**422** - An error occurred

| Property     | Type             | Required | Description |
| ------------ | ---------------- | -------- | ----------- |
| `@context`   | `object`         | -        |             |
| `@id`        | `string`         | Yes      |             |
| `@type`      | `string`         | Yes      |             |
| `status`     | `integer`        | -        |             |
| `violations` | `object[]`       | -        |             |
| `detail`     | `string`         | -        |             |
| `type`       | `string`         | -        |             |
| `title`      | `string \| null` | -        |             |
| `instance`   | `string \| null` | -        |             |

## Examples

### Example request

```bash
curl -X POST 'https://<tenant>.product-management.flowkiwi.net/rest/api/medias' \
  -H 'Authorization: Bearer {token}' \
  -H 'X-Flowkiwi-Organization-Id: <org_id>' \
  -H 'Accept: application/ld+json' \
  -F 'file=@/path/to/photo.jpg'
```

### Example response

```json
{
  "@context": "/contexts/Media",
  "@id": "/rest/api/medias/01234567-89ab-cdef-0123-456789abcdef",
  "@type": "https://schema.org/MediaObject",
  "id": "01234567-89ab-cdef-0123-456789abcdef",
  "contentUrl": "/uploads/medias/tshirt-red-front.jpg",
  "mimeType": "image/jpeg",
  "type": "image",
  "hash": "9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
  "dimensions": {
    "@type": "EmbeddedImageDimensionResource",
    "width": 1200,
    "height": 1200
  },
  "createdAt": "2026-01-15T09:30:00+00:00",
  "updatedAt": "2026-02-03T14:45:12+00:00"
}
```