> ## Documentation Index
> Fetch the complete documentation index at: https://developers.x-pilot.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Upload assets

> Multipart upload, field name files, up to 5 files per request. Limits per file: documents (pdf, docx, pptx, md, markdown, mdx) 10 MB; images (jpg, jpeg, png, gif, webp, svg) 10 MB; audio (wav, mp3, m4a, aac, ogg, flac) 20 MB; video (mp4, webm, mov) 60 MB. Empty files are rejected. Errors return 400 invalid_parameter with reason (too_many, unsupported_type, empty, too_large), file and max_mb. Returned ids and urls are reused by conversations, voice cloning and avatar creation.

export const XpilotArticleMetadata = () => <script type="application/ld+json" data-xpilot-article-metadata="" dangerouslySetInnerHTML={{
  __html: "{\"@context\":\"https://schema.org\",\"@id\":\"https://developers.x-pilot.ai/api-reference/upload-assets#apireference\",\"author\":{\"@type\":\"Organization\",\"@id\":\"https://www.x-pilot.ai/#organization\",\"name\":\"X-Pilot\",\"url\":\"https://www.x-pilot.ai/\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https://developers.x-pilot.ai/images/integration-api.png\",\"width\":1200,\"height\":675,\"caption\":\"REST requests use a scoped API key. Keys, credits and usage are managed in the App console.\"}}"
}} />;

<XpilotArticleMetadata />

export const XpilotBreadcrumb = () => <nav aria-label="Breadcrumb" className="xpilot-breadcrumb"><ol><li><a href="/api-reference/list-assets">Assets</a></li><li aria-current="page"><span aria-hidden="true">/</span><span>Upload assets</span></li></ol></nav>;

<XpilotBreadcrumb />

<p className="xpilot-doc-author">Documentation by <a href="https://www.x-pilot.ai/">X-Pilot</a></p>

Required scope: `assets:write`.

[Manage API keys](https://app.x-pilot.ai/developers/console) · [Authentication and recovery](/api-reference)

export const XpilotDocFigure = () => <figure className="xpilot-doc-figure"><img src="/images/integration-api.png" alt="An application sends a scoped API key to the X-Pilot REST API and receives an HTTP status and JSON response." width="1200" height="675" loading="lazy" /><figcaption>REST requests use a scoped API key. Keys, credits and usage are managed in the App console.</figcaption></figure>;

<XpilotDocFigure />


## OpenAPI

````yaml openapi.json POST /v1/assets
openapi: 3.0.3
info:
  title: X-Pilot Developer API
  version: 1.1.0
  description: >-
    Generated from the same public REST contract used by the X-Pilot app. REST
    uses scoped API Keys. MCP OAuth tokens do not authenticate REST requests.
servers:
  - url: https://api.x-pilot.ai
    description: Production; confirm the deployed base URL in Developer Console.
security:
  - BearerAuth: []
tags:
  - name: Video Agent
  - name: Renders
  - name: Brand kits
  - name: Account & capacity
  - name: Assets
  - name: Voices & audio
  - name: Avatars
paths:
  /v1/assets:
    post:
      tags:
        - Assets
      summary: Upload assets
      description: >-
        Multipart upload, field name files, up to 5 files per request. Limits
        per file: documents (pdf, docx, pptx, md, markdown, mdx) 10 MB; images
        (jpg, jpeg, png, gif, webp, svg) 10 MB; audio (wav, mp3, m4a, aac, ogg,
        flac) 20 MB; video (mp4, webm, mov) 60 MB. Empty files are rejected.
        Errors return 400 invalid_parameter with reason (too_many,
        unsupported_type, empty, too_large), file and max_mb. Returned ids and
        urls are reused by conversations, voice cloning and avatar creation.
      operationId: upload-assets
      parameters: []
      requestBody:
        required: true
        content:
          multipart/form-data:
            schema:
              type: object
              properties:
                files:
                  type: array
                  items:
                    type: string
                    format: binary
                  description: >-
                    Multipart form field. Repeat files for multiple uploads (max
                    5).
                  example: '@solar.pdf'
              required:
                - files
      responses:
        '201':
          description: Success
          content:
            application/json:
              example:
                data:
                  - id: 1
                    name: solar.pdf
                    url: <asset_url>
                    mimetype: application/pdf
                    created_at: 1791849600
                    updated_at: 1791849600
        '400':
          description: Check parameter types, required fields and idempotency key.
          content:
            application/json:
              example:
                error:
                  code: invalid_parameter
                  message: Check parameter types, required fields and idempotency key.
                request_id: <request_id>
        '401':
          description: Use an active scoped API Key. MCP OAuth tokens cannot call REST.
          content:
            application/json:
              example:
                error:
                  code: invalid_token
                  message: >-
                    Use an active scoped API Key. MCP OAuth tokens cannot call
                    REST.
                request_id: <request_id>
        '403':
          description: Check the credential scope and resource ownership.
          content:
            application/json:
              example:
                error:
                  code: insufficient_scope
                  message: Check the credential scope and resource ownership.
                request_id: <request_id>
        '409':
          description: >-
            The same idempotency key must use the exact same input. A
            conversation may already be busy.
          content:
            application/json:
              example:
                error:
                  code: idempotency_conflict
                  message: >-
                    The same idempotency key must use the exact same input. A
                    conversation may already be busy.
                request_id: <request_id>
        '429':
          description: >-
            Credential/workspace rate or concurrency limit reached. Respect
            Retry-After before retrying.
          content:
            application/json:
              example:
                error:
                  code: rate_limited
                  message: >-
                    Credential/workspace rate or concurrency limit reached.
                    Respect Retry-After before retrying.
                  retry_after: 60
                request_id: <request_id>
      x-codeSamples:
        - lang: curl
          label: cURL
          source: |-
            curl --fail-with-body --request POST \
              --url "$XPILOT_API_BASE_URL/v1/assets" \
              --header "Authorization: Bearer $XPILOT_API_KEY" \
              --form 'files=@"solar.pdf"'
        - lang: javascript
          label: JavaScript
          source: >-
            const form = new FormData();

            form.append("files", /* File|Blob */ solarPdf, "solar.pdf");

            const response = await fetch(process.env.XPILOT_API_BASE_URL +
            "/v1/assets", {
              method: "POST",
              headers: { Authorization: `Bearer ${process.env.XPILOT_API_KEY}` },
              body: form,
            });

            const result = await response.json();

            if (!response.ok) throw new Error(JSON.stringify(result));

            console.log(result);
        - lang: python
          label: Python
          source: |-
            import os, requests

            response = requests.post(
                os.environ["XPILOT_API_BASE_URL"] + "/v1/assets",
                headers={"Authorization": "Bearer " + os.environ["XPILOT_API_KEY"]},
                files=[("files", ("solar.pdf", open("solar.pdf", "rb"), "application/pdf"))],
                timeout=70,
            )
            print(response.status_code, response.text)
            response.raise_for_status()
components:
  securitySchemes:
    BearerAuth:
      type: http
      scheme: bearer
      description: Scoped X-Pilot API key

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.