Upload Quote Document

POST 
/api/quotes/:quote/attachments

Uploads a document to the quote (multipart/form-data).

Required scope: orders:write

Grant this scope to your token under Settings → Developer → Personal Access Tokens.

Form fields

• file (required) — PDF, PNG, JPG, DOCX or XLSX, up to 20 MB, not empty.
• visible_to_customer (optional, boolean, default true) — whether the buyer can download it from the B2B portal.

Returns 201 with the document.

Authentication: Requires Bearer token. Permission: quotes.update.

Request

Responses

201

Created

Response Headers

Content-Type

401

Unauthenticated — the bearer token is missing, revoked, expired, or malformed. Never retry automatically; fix the credential. See the Errors guide.

403

Forbidden — the token lacks a required scope, the endpoint is not available to API tokens, or the user behind the token lacks the permission. A human must adjust the token scopes or user permissions; do not retry.

404

Not found — no record with the given identifier (or the route does not exist). Verify the ID before retrying.

422

Unprocessable Entity

Response Headers

Content-Type

429

Rate limited — platform limit is 1,000 requests/min; individual tokens may carry lower limits. Honor the Retry-After header before retrying. See the Rate Limits guide.