Skip to main content
Attaching a file to a Risk Cloud record via the API is a multi-step process: upload the file to get an attachment object, then link that attachment to the record’s Attachment field. Before making any of these calls you’ll need a bearer token — see Authentication.

Step 1: Obtain the field ID

First, find the Workflow that contains the Attachment field:
Then request the Workflow’s Fields:
Identify the Attachment field in the response and note its id — this is the FIELD_ID used in the next step. See Viewing Fields for more on retrieving field metadata.

Step 2: Upload a file

Submit the file as multipart/form-data:
The response returns the attachment object, including its id, file metadata, and version count:
Save the id from this response — you’ll need it to link the file to a record.

Step 3: Attach the file to a record

Build a request body referencing the attachment from Step 2 and the target Attachment field, then submit it against the record:
The response confirms the attachment is now linked to the specified record.

Step 4: Version an existing attachment (optional)

To upload a new version of a file that’s already attached, submit the updated file to:
The attachment’s versionCount increments automatically. Because the attachment already exists on the record, Step 3 is not needed when versioning.