Files
Files endpoints of the Ellipsis REST API.
Metadata only — download URLs are minted per explicit GET, not per row. session_id scopes the list to one run's uploads.
curl "https://api.ellipsis.dev/files" \
-H "Authorization: Bearer $ELLIPSIS_API_KEY"{
"files": [
{
"content_type": "string",
"created_at": "2026-01-01T00:00:00Z",
"filename": "string",
"id": "string",
"session_id": "string",
"size_bytes": 0
}
],
"has_more": false,
"next_cursor": "string"
}import os
from ellipsis import Ellipsis
client = Ellipsis(api_key=os.environ["ELLIPSIS_API_TOKEN"])
for item in client.files.list():
print(item){
"files": [
{
"content_type": "string",
"created_at": "2026-01-01T00:00:00Z",
"filename": "string",
"id": "string",
"session_id": "string",
"size_bytes": 0
}
],
"has_more": false,
"next_cursor": "string"
}import { Ellipsis } from '@ellipsis-dev/sdk';
const client = new Ellipsis({
apiKey: process.env.ELLIPSIS_API_TOKEN!,
});
for await (const item of client.files.list()) {
console.log(item);
}{
"files": [
{
"content_type": "string",
"created_at": "2026-01-01T00:00:00Z",
"filename": "string",
"id": "string",
"session_id": "string",
"size_bytes": 0
}
],
"has_more": false,
"next_cursor": "string"
}No request body.
{
"properties": {
"files": {
"items": {
"properties": {
"content_type": {
"type": "string"
},
"created_at": {
"format": "date-time",
"type": "string"
},
"filename": {
"type": "string"
},
"id": {
"type": "string"
},
"session_id": {
"anyOf": [
{
"type": "string"
},
{
"type": "null"
}
]
},
"size_bytes": {
"type": "integer"
}
},
"required": [
"id",
"filename",
"content_type",
"size_bytes",
"created_at"
],
"type": "object"
},
"type": "array"
},
"has_more": {
"default": false,
"type": "boolean"
},
"next_cursor": {
"anyOf": [
{
"type": "string"
},
{
"type": "null"
}
]
}
},
"required": [
"files"
],
"type": "object"
}Request
session_idstring
limitdefault
50integercursorstring
Responses
v1: PNG images only, base64 in the JSON body, 10 MiB cap. The primary caller is the in-sandbox `agent file upload` CLI (an agent persisting a screenshot to link on a PR), but all credential types work. Returns the org-membership-gated dashboard URL so callers never hard-code URL shapes.
curl -X POST "https://api.ellipsis.dev/files" \
-H "Authorization: Bearer $ELLIPSIS_API_KEY" \
-H "Content-Type: application/json" \
-d '{
"content_type": "...",
"data_b64": "...",
"filename": "..."
}'{
"file": {
"content_type": "string",
"created_at": "2026-01-01T00:00:00Z",
"filename": "string",
"id": "string",
"session_id": "string",
"size_bytes": 0
},
"url": "string"
}import os
from ellipsis import Ellipsis
client = Ellipsis(api_key=os.environ["ELLIPSIS_API_TOKEN"])
result = client.files.create("...", "...", "...")
print(result){
"file": {
"content_type": "string",
"created_at": "2026-01-01T00:00:00Z",
"filename": "string",
"id": "string",
"session_id": "string",
"size_bytes": 0
},
"url": "string"
}import { Ellipsis } from '@ellipsis-dev/sdk';
const client = new Ellipsis({
apiKey: process.env.ELLIPSIS_API_TOKEN!,
});
const result = await client.files.create(
{ content_type: '...', data_b64: '...', filename: '...' },
);
console.log(result);{
"file": {
"content_type": "string",
"created_at": "2026-01-01T00:00:00Z",
"filename": "string",
"id": "string",
"session_id": "string",
"size_bytes": 0
},
"url": "string"
}{
"properties": {
"content_type": {
"type": "string"
},
"data_b64": {
"type": "string"
},
"filename": {
"type": "string"
}
},
"required": [
"filename",
"content_type",
"data_b64"
],
"type": "object"
}{
"properties": {
"file": {
"properties": {
"content_type": {
"type": "string"
},
"created_at": {
"format": "date-time",
"type": "string"
},
"filename": {
"type": "string"
},
"id": {
"type": "string"
},
"session_id": {
"anyOf": [
{
"type": "string"
},
{
"type": "null"
}
]
},
"size_bytes": {
"type": "integer"
}
},
"required": [
"id",
"filename",
"content_type",
"size_bytes",
"created_at"
],
"type": "object"
},
"url": {
"type": "string"
}
},
"required": [
"file",
"url"
],
"type": "object"
}Request
content_typestringrequired
The MIME type of the file. Only image/png is currently supported, and the uploaded bytes must actually be a PNG.
data_b64stringrequired
The raw file bytes, base64-encoded.
filenamestringrequired
The original file basename. Used for display only.
Responses
Includes the gated dashboard URL and a short-lived presigned `download_url`. To fetch the bytes locally, call this and then GET download_url immediately — the JSON API never carries the file. The CLI's `agent file get` wraps exactly that two-step.
curl "https://api.ellipsis.dev/files/{file_id}" \
-H "Authorization: Bearer $ELLIPSIS_API_KEY"{
"download_url": "string",
"file": {
"content_type": "string",
"created_at": "2026-01-01T00:00:00Z",
"filename": "string",
"id": "string",
"session_id": "string",
"size_bytes": 0
},
"url": "string"
}import os
from ellipsis import Ellipsis
client = Ellipsis(api_key=os.environ["ELLIPSIS_API_TOKEN"])
result = client.files.get("...")
print(result){
"download_url": "string",
"file": {
"content_type": "string",
"created_at": "2026-01-01T00:00:00Z",
"filename": "string",
"id": "string",
"session_id": "string",
"size_bytes": 0
},
"url": "string"
}import { Ellipsis } from '@ellipsis-dev/sdk';
const client = new Ellipsis({
apiKey: process.env.ELLIPSIS_API_TOKEN!,
});
const result = await client.files.get('...');
console.log(result);{
"download_url": "string",
"file": {
"content_type": "string",
"created_at": "2026-01-01T00:00:00Z",
"filename": "string",
"id": "string",
"session_id": "string",
"size_bytes": 0
},
"url": "string"
}No request body.
{
"properties": {
"download_url": {
"type": "string"
},
"file": {
"properties": {
"content_type": {
"type": "string"
},
"created_at": {
"format": "date-time",
"type": "string"
},
"filename": {
"type": "string"
},
"id": {
"type": "string"
},
"session_id": {
"anyOf": [
{
"type": "string"
},
{
"type": "null"
}
]
},
"size_bytes": {
"type": "integer"
}
},
"required": [
"id",
"filename",
"content_type",
"size_bytes",
"created_at"
],
"type": "object"
},
"url": {
"type": "string"
}
},
"required": [
"file",
"url",
"download_url"
],
"type": "object"
}Request
file_idstringrequired
Responses
A foreign, missing, or already-deleted id is an indistinguishable 404, so ids can't be enumerated. Sandbox tokens get a 403 (a sandbox token sits next to potentially-untrusted code and must not be able to destroy the account's files — uploading is fine, destruction is not); API keys and user tokens may delete.
curl -X DELETE "https://api.ellipsis.dev/files/{file_id}" \
-H "Authorization: Bearer $ELLIPSIS_API_KEY"import os
from ellipsis import Ellipsis
client = Ellipsis(api_key=os.environ["ELLIPSIS_API_TOKEN"])
result = client.files.delete("...")
print(result)import { Ellipsis } from '@ellipsis-dev/sdk';
const client = new Ellipsis({
apiKey: process.env.ELLIPSIS_API_TOKEN!,
});
const result = await client.files.delete('...');
console.log(result);Request
file_idstringrequired