createMediaUpload
ACR DashboardRuns the canonical account product command. Requires a_to_z.manage; active credential scope, current issuing membership, surface grant and account eligibility are rechecked. Existing product safety, business rules, idempotency and limits remain authoritative.
Authorization
bearerAuth Organization-scoped bearer credential. Credentials are scoped, revocable, and never represented by a Soul or operation ID.
In: header
Header Parameters
Canonical product action UUID. Reuse for retries of the same action. Pricing and generation launch use distinct action UUIDs.
uuidUntrusted explicit workspace UUID. Omitted selects Personal. Workspace commands require current membership, role, surface and grant; explicit denied selection never falls back. Account-owned commands reject a nonpersonal selected workspace. One Account surface key spans currently authorized workspaces; selecting a workspace never issues another key.
uuidRequest Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
Canonical /api/media/upload declaration. Retain provider fields from the existing product upload contract. POST operation=create (default) issues the owned direct-upload destination; upload bytes to it; POST operation=finalize finalizes supported image uploads. Surface-specific policy is derived from the API hostname.
Response Body
application/json
curl -X POST "https://acr.kallfi.red/v1/media/uploads" \ -H "Idempotency-Key: 497f6eca-6276-4993-bfeb-53cbbbba6f08" \ -H "Content-Type: application/json" \ -d '{ "surface": "string", "mediaType": "image" }'{}