Post Work Order Tasks Id Attachments
Attaches files to a task from signed blob IDs obtained via the direct-upload flow.
Authentication
OAuth 2.0 Client Credentials Flow. To obtain an access token:
-
Request API credentials from HINDSITE support to receive your
client_idandclient_secret -
Make a POST request to obtain an access token:
POST https://app.hindsiteind.com/oauth/token
Content-Type: application/x-www-form-urlencoded
grant_type=client_credentials&client_id=YOUR_CLIENT_ID&client_secret=YOUR_CLIENT_SECRET
- The response will contain your access token:
{
"access_token": "your_access_token_here",
"token_type": "Bearer",
"expires_in": 7200,
"created_at": 1234567890
}
- Include the token in subsequent API requests:
Authorization: Bearer your_access_token_here
Path parameters
Request
Signed blob IDs from the direct-upload flow
Response
Unix timestamp (seconds since epoch); null until the task is started
Only present when include_asset=true is requested on the parent work order, and on POST /api/v2/my_work/search; null when the task has no asset. When the work order has an asset, every task carries that same asset and it cannot be changed per task; tasks only carry their own assets on a work order with no asset.
The task’s start, the earlier of planned_start_at and started_at, as ISO 8601 in its work order’s location’s time zone (e.g. 2026-09-24T14:00:00.000+08:00 for 2pm in Perth); null when neither is set
The location of the task’s work order. Returned by POST /api/v2/my_work/search.
The task’s work order. Returned by POST /api/v2/my_work/search.
Present when include_custom_fields=true is requested, and always on the POST /api/v2/work_order_tasks response.
Present when include_custom_fields=true is requested, and always on the POST /api/v2/work_order_tasks response. The organisation’s definitions for work order tasks; empty when it has none.
Whether the reviews panel applies. Returned with include_reviewers.
Users who can be requested as reviewers. Returned with include_reviewers.
Whether the caller can review. Replaces the deprecated user_can_review.
Reasons the caller cannot review yet; empty when they can. Returned with include_reviewers.
Whether the caller can add or remove reviewers. Returned with include_reviewers.
Reasons an external review cannot be requested yet. Returned with include_reviewers.
Whether the caller can request an external review. Returned with include_reviewers.
External reviewers the caller can request. Returned only when external_reviews_offered is true.
Unix timestamp (seconds since epoch) when the record was created
Unix timestamp (seconds since epoch) when the record was last updated