Upload a New File to the Root of the Storage disk.storage.uploadfile

If you are developing integrations for Bitrix24 using AI tools (Codex, Claude Code, Cursor), connect to the MCP server so that the assistant can utilize the official REST documentation.

Scope: disk

Who can execute the method: a user with "Add" access permission for the required storage

The method disk.storage.uploadfile uploads a new file to the root of the storage.

Method Parameters

Required parameters are marked with *

Name `type`	Description
id* `integer`	Identifier of the storage where the file needs to be uploaded. The identifier can be obtained using the method disk.storage.getlist
data* `array`	An array with the field `NAME`, where `NAME` is the name of the file
fileContent* `array`	An array containing the file name and a string with Base64
rights `array`	An array of access permissions for the uploaded file in the format `{"TASK_ID": 42, "ACCESS_CODE": "U35"}`, where `TASK_ID` — identifier of the access level `ACCESS_CODE` — access code consisting of a letter code for the user or department and an identifier User categories: `U` — user `*` — all users `D` — all department employees `DR` — all department employees including sub-departments The list of available `TASK_ID` identifiers for setting permissions can be obtained using the method disk.rights.getTasks
generateUniqueName `boolean`	Generate a unique file name if a file with that name already exists. For example, file (1).docx. Possible values: `true` — generate `false` — do not generate Default is `false`

Code Examples

How to Use Examples in Documentation

cURL (Webhook)

cURL (OAuth)

PHP

BX24.js

PHP CRest

curl -X POST \
        -H "Content-Type: application/json" \
        -H "Accept: application/json" \
        -d '{"id":1357,"data":{"NAME":"picture.png"},"fileContent":["picture.png","iVBORw0KGgoAAAANSUhEUgAAAD4AAABDCAYAAADEfbZbAAAACXBIWXMAABJ0AAASdAHeZh94...RK5CYII="],"generateUniqueName":true,"rights":[{"TASK_ID":79,"ACCESS_CODE":"U1271"}]}' \
        https://**put_your_bitrix24_address**/rest/**put_your_user_id_here**/**put_your_webhook_here**/disk.storage.uploadfile

curl -X POST \
        -H "Content-Type: application/json" \
        -H "Accept: application/json" \
        -d '{"id":1357,"data":{"NAME":"picture.png"},"fileContent":["picture.png","iVBORw0KGgoAAAANSUhEUgAAAD4AAABDCAYAAADEfbZbAAAACXBIWXMAABJ0AAASdAHeZh94...RK5CYII="],"generateUniqueName":true,"rights":[{"TASK_ID":79,"ACCESS_CODE":"U1271"}],"auth":"**put_access_token_here**"}' \
        https://**put_your_bitrix24_address**/rest/disk.storage.uploadfile

try
        {
            const response = await $b24.callMethod(
                'disk.storage.uploadfile',
                {
                    id: 1357,
                    data: {
                        NAME: 'picture.png'
                    },
                    fileContent: [
                        'picture.png',
                        'iVBORw0KGgoAAAANSUhEUgAAAD4AAABDCAYAAADEfbZbAAAACXBIWXMAABJ0AAASdAHeZh94...RK5CYII='
                    ],
                    generateUniqueName: true,
                    rights: [
                        {
                            TASK_ID: 79,
                            ACCESS_CODE: 'U1271'
                        }
                    ]
                }
            );
            
            const result = response.getData().result;
            console.log('Uploaded file:', result);
            
            processResult(result);
        }
        catch( error )
        {
            console.error('Error:', error);
        }

try {
            $response = $b24Service
                ->core
                ->call(
                    'disk.storage.uploadfile',
                    [
                        'id' => 1357,
                        'data' => [
                            'NAME' => 'picture.png'
                        ],
                        'fileContent' => [
                            'picture.png',
                            'iVBORw0KGgoAAAANSUhEUgAAAD4AAABDCAYAAADEfbZbAAAACXBIWXMAABJ0AAASdAHeZh94...RK5CYII='
                        ],
                        'generateUniqueName' => true,
                        'rights' => [
                            [
                                'TASK_ID' => 79,
                                'ACCESS_CODE' => 'U1271'
                            ]
                        ]
                    ]
                );
        
            $result = $response
                ->getResponseData()
                ->getResult();
        
            echo 'Success: ' . print_r($result, true);
            processData($result);
        
        } catch (Throwable $e) {
            error_log($e->getMessage());
            echo 'Error uploading file: ' . $e->getMessage();
        }

BX24.callMethod(
            "disk.storage.uploadfile",
            {
                id: 1357,
                data: {
                    NAME: "picture.png"
                },
                fileContent: [
                'picture.png',
                'iVBORw0KGgoAAAANSUhEUgAAAD4AAABDCAYAAADEfbZbAAAACXBIWXMAABJ0AAASdAHeZh94...RK5CYII=',
                ],
                generateUniqueName: true,
                rights: [
                    {
                        TASK_ID: 79,
                        ACCESS_CODE: 'U1271'
                    }
                ]
            },
            function (result)
            {
                if (result.error())
                    console.error(result.error());
                else
                    console.dir(result.data());
            }
        );

require_once('crest.php');
        
        $result = CRest::call(
            'disk.storage.uploadfile',
            [
                'id' => 1357,
                'data' => [
                    'NAME' => 'picture.png'
                ],
                'fileContent' => [
                    'picture.png',
                    'iVBORw0KGgoAAAANSUhEUgAAAD4AAABDCAYAAADEfbZbAAAACXBIWXMAABJ0AAASdAHeZh94...RK5CYII='
                ],
                'generateUniqueName' => true,
                'rights' => [
                    [
                        'TASK_ID' => 79,
                        'ACCESS_CODE' => 'U1271'
                    ]
                ]
            ]
        );
        
        echo '<PRE>';
        print_r($result);
        echo '</PRE>';

Response Handling

HTTP Status: 200

{
            "result": {
                "ID": 9035,
                "NAME": "picture.png",
                "CODE": null,
                "STORAGE_ID": "1357",
                "TYPE": "file",
                "PARENT_ID": "8875",
                "DELETED_TYPE": 0,
                "GLOBAL_CONTENT_VERSION": 1,
                "FILE_ID": 32895,
                "SIZE": "1679",
                "CREATE_TIME": "2026-02-02T16:01:59+02:00",
                "UPDATE_TIME": "2026-02-02T16:01:59+02:00",
                "DELETE_TIME": null,
                "CREATED_BY": "1269",
                "UPDATED_BY": "1269",
                "DELETED_BY": null,
                "DOWNLOAD_URL": "https://test.bitrix24.com/rest/download.json?auth=b8d880690000071b006e2cf2000004f50000078dbaf74c54ad1b4e4205aba7ab57a395&token=disk%7CaWQ9OTAzNSZfPWU5eXpWQXpsVmJrdFE0OTJ3azBKQzNFVFVMek5UMTRU%7CImRvd25sb2FkfGRpc2t8YVdROU9UQXpOU1pmUFdVNWVYcFdRWHBzVm1KcmRGRTBPVEozYXpCS1F6TkZWRlZNZWs1VU1UUlV8YjhkODgwNjkwMDAwMDcxYjAwNmUyY2YyMDAwMDA0ZjUwMDAwMDc4ZGJhZjc0YzU0YWQxYjRlNDIwNWFiYTdhYjU3YTM5NSI%3D.DJafMz5LAuRzlGbCxNLoGiCleoFwz1qGyj4iPf7n110%3D",
                "DETAIL_URL": "https://test.bitrix24.com/company/personal/user/1269/disk/file/picture.png"
            },
            "time": {
                "start": 1770051719,
                "finish": 1770051719.707384,
                "duration": 0.7073841094970703,
                "processing": 0,
                "date_start": "2026-02-02T16:01:59+02:00",
                "date_finish": "2026-02-02T16:01:59+02:00",
                "operating_reset_at": 1770052319,
                "operating": 0.34273815155029297
            }
        }

Returned Data

Name `type`	Description
result `array`	An array with file fields
ID `integer`	Identifier of the file
NAME `string`	Name of the file
CODE `string`	Symbolic code of the file
STORAGE_ID `integer`	Identifier of the storage where the file is located
TYPE `enum`	Type of the object
PARENT_ID `integer`	Identifier of the parent folder
DELETED_TYPE `enum`	Deletion status of the object. Possible values: `0` — not deleted `3` — in the trash `4` — deleted along with the parent folder
GLOBAL_CONTENT_VERSION `integer`	Incremental version counter of the file
FILE_ID `integer`	Internal value of the file identifier
SIZE `integer`	Size of the file in bytes
CREATE_TIME `datetime`	Date and time of file creation
UPDATE_TIME `datetime`	Date and time of the last file update
DELETE_TIME `datetime`	Date and time the file was moved to the trash
CREATED_BY `integer`	Identifier of the user who created the file
UPDATED_BY `integer`	Identifier of the user who made the last change
DELETED_BY `integer`	Identifier of the user who deleted the file
DOWNLOAD_URL `string`	Link to download the file
DETAIL_URL `string`	Link to open the file in the interface
time `time`	Information about the execution time of the request

Error Handling

HTTP Status: 400

{
            "error":"ERROR_NOT_FOUND",
            "error_description":"Could not find entity with id `X`"
        }

Name `type`	Description
error `string`	String error code. It may consist of digits, Latin letters, and underscores
error_description `error_description`	Textual description of the error. The description is not intended to be shown to the end user in its raw form

Possible Error Codes

Code	Description	Value
`ERROR_ARGUMENT`	Invalid value of parameter	Required parameter not specified
`ERROR_NOT_FOUND`	Could not find entity with id `X`	Storage with the specified `id` not found
`DISK_BASE_SERVICE_22001`	Error: required parameter NAME (DISK_BASE_SERVICE_22001)	Required parameter `NAME` not specified in the `data` array
`ERROR_COULD_NOT_SAVE_FILE`	Could not save file	Failed to save the file. Check available space on the Drive and the correctness of the data encoding
—	Invalid rights format	Invalid format of the `rights` parameter
`ACCESS_DENIED`	Access denied	Insufficient permissions to add the file

Statuses and System Error Codes

HTTP Status: 20x, 40x, 50x

The errors described below may occur when calling any method.

Status	Code Error Message	Description
`500`	`INTERNAL_SERVER_ERROR` Internal server error	An internal server error has occurred. Please contact the server administrator or Bitrix24 technical support
`500`	`ERROR_UNEXPECTED_ANSWER` Server returned an unexpected response	An internal server error has occurred. Please contact the server administrator or Bitrix24 technical support
`503`	`QUERY_LIMIT_EXCEEDED` Too many requests	The request intensity limit has been exceeded
`405`	`ERROR_BATCH_METHOD_NOT_ALLOWED` Method is not allowed for batch usage	The current method is not permitted for calls using batch
`400`	`ERROR_BATCH_LENGTH_EXCEEDED` Max batch length exceeded	The maximum length of parameters passed to the batch method has been exceeded
`401`	`NO_AUTH_FOUND` Wrong authorization data	Invalid access token or webhook code
`400`	`INVALID_REQUEST` Https required	The HTTPS protocol is required for method calls
`503`	`OVERLOAD_LIMIT` REST API is blocked due to overload	The REST API is blocked due to overload. This is a manual individual block; please contact Bitrix24 technical support to lift it
`403`	`ACCESS_DENIED` REST API is available only on commercial plans	The REST API is only available on commercial plans
`403`	`INVALID_CREDENTIALS` Invalid request credentials	The user associated with the access token or webhook used to call the method lacks the necessary permissions
`404`	`ERROR_MANIFEST_IS_NOT_AVAILABLE` Manifest is not available	The manifest is not available
`403`	`insufficient_scope` The request requires higher privileges than provided by the webhook token	The request requires higher privileges than those provided by the webhook token
`401`	`expired_token` The access token provided has expired	The provided access token has expired
`403`	`user_access_error` The user does not have access to the application	The user does not have access to the application. This means that the application is installed, but the portal administrator has restricted access to this application to specific users only
`500`	`PORTAL_DELETED` Portal was deleted	The public part of the site is closed. To open the public part of the site on an on-premise installation, disable the "Temporary closure of the public part of the site" option. Path to the setting: Desktop > Settings > Product Settings > Module Settings > Main Module > Temporary closure of the public part of the site

Continue Learning

Rename the Application Storage

Overview of Methods

Upload a New File to the Root of the Storage disk.storage.uploadfile

Method ParametersMethod Parameters

Code ExamplesCode Examples

Response HandlingResponse Handling

Returned DataReturned Data

Error HandlingError Handling

Possible Error CodesPossible Error Codes

Statuses and System Error CodesStatuses and System Error Codes

Continue LearningContinue Learning