Files
Files endpoints of the Ellipsis REST API.
Metadata only — download URLs are minted per explicit GET, not per row. agent_session_id scopes the list to one run's uploads.
curl "https://api.ellipsis.dev/files" \
-H "Authorization: Bearer $ELLIPSIS_API_KEY"{
"files": [
{
"agent_session_id": "string",
"content_type": "string",
"created_at": "2026-01-01T00:00:00Z",
"filename": "string",
"id": "string",
"size_bytes": 0
}
]
}{
"properties": {
"files": {
"items": {
"properties": {
"agent_session_id": {
"anyOf": [
{
"type": "string"
},
{
"type": "null"
}
]
},
"content_type": {
"type": "string"
},
"created_at": {
"format": "date-time",
"type": "string"
},
"filename": {
"type": "string"
},
"id": {
"type": "string"
},
"size_bytes": {
"type": "integer"
}
},
"required": [
"id",
"filename",
"content_type",
"size_bytes",
"created_at"
],
"type": "object"
},
"type": "array"
}
},
"required": [
"files"
],
"type": "object"
}Request
50integerResponses
v1: PNG images only, base64 in the JSON body, 10 MiB cap. The primary caller is the in-sandbox `agent file upload` CLI (an agent persisting a screenshot to link on a PR), but all credential types work. Returns the org-membership-gated dashboard URL so callers never hard-code URL shapes.
curl -X POST "https://api.ellipsis.dev/files" \
-H "Authorization: Bearer $ELLIPSIS_API_KEY" \
-H "Content-Type: application/json" \
-d '{
"content_type": "...",
"data_b64": "...",
"filename": "..."
}'{
"file": {
"agent_session_id": "string",
"content_type": "string",
"created_at": "2026-01-01T00:00:00Z",
"filename": "string",
"id": "string",
"size_bytes": 0
},
"url": "string"
}{
"properties": {
"content_type": {
"type": "string"
},
"data_b64": {
"type": "string"
},
"filename": {
"type": "string"
}
},
"required": [
"filename",
"content_type",
"data_b64"
],
"type": "object"
}{
"properties": {
"file": {
"properties": {
"agent_session_id": {
"anyOf": [
{
"type": "string"
},
{
"type": "null"
}
]
},
"content_type": {
"type": "string"
},
"created_at": {
"format": "date-time",
"type": "string"
},
"filename": {
"type": "string"
},
"id": {
"type": "string"
},
"size_bytes": {
"type": "integer"
}
},
"required": [
"id",
"filename",
"content_type",
"size_bytes",
"created_at"
],
"type": "object"
},
"url": {
"type": "string"
}
},
"required": [
"file",
"url"
],
"type": "object"
}Request
The MIME type of the file. Only image/png is currently supported, and the uploaded bytes must actually be a PNG.
The raw file bytes, base64-encoded.
The original file basename. Used for display only.
Responses
Includes the gated dashboard URL and a short-lived presigned `download_url`. To fetch the bytes locally, call this and then GET download_url immediately — the JSON API never carries the file. The CLI's `agent file get` wraps exactly that two-step.
curl "https://api.ellipsis.dev/files/{file_id}" \
-H "Authorization: Bearer $ELLIPSIS_API_KEY"{
"download_url": "string",
"file": {
"agent_session_id": "string",
"content_type": "string",
"created_at": "2026-01-01T00:00:00Z",
"filename": "string",
"id": "string",
"size_bytes": 0
},
"url": "string"
}{
"properties": {
"download_url": {
"type": "string"
},
"file": {
"properties": {
"agent_session_id": {
"anyOf": [
{
"type": "string"
},
{
"type": "null"
}
]
},
"content_type": {
"type": "string"
},
"created_at": {
"format": "date-time",
"type": "string"
},
"filename": {
"type": "string"
},
"id": {
"type": "string"
},
"size_bytes": {
"type": "integer"
}
},
"required": [
"id",
"filename",
"content_type",
"size_bytes",
"created_at"
],
"type": "object"
},
"url": {
"type": "string"
}
},
"required": [
"file",
"url",
"download_url"
],
"type": "object"
}Request
Responses
A foreign, missing, or already-deleted id is an indistinguishable 404, so ids can't be enumerated. Sandbox tokens get a 403 (a sandbox token sits next to potentially-untrusted code and must not be able to destroy the account's files — uploading is fine, destruction is not); API keys and user tokens may delete.
curl -X DELETE "https://api.ellipsis.dev/files/{file_id}" \
-H "Authorization: Bearer $ELLIPSIS_API_KEY"