Files and Attachments APIs

Attachments provide more information about a contact or a company, which normally cannot be displayed. You may also need to send images, text files or videos or any other type of files to contacts. The files and attachments API allows a user to get a list of attachments, upload or download a photo or a file.

Get list of Attachments

Purpose

To get the list of attachments.

Request Details

Request URL

{api-domain}/crm/{version}/{module_api_name}/{record_id}/Attachments

Supported modules

Leads, Accounts, Contacts, Deals, Campaigns, Tasks, Cases, Events, Calls, Solutions, Products, Vendors, Price Books, Quotes, Sales Orders, Purchase Orders, Invoices, Custom, and Notes

Header

Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52

Scope

scope=ZohoCRM.modules.ALL
(or)
scope=ZohoCRM.modules.{module_name}.{operation_type}
(and)
scope=ZohoCRM.modules.attachments.{operation_type}

Possible module names

leads, accounts, contacts, deals, campaigns, tasks, cases, events, calls, solutions, products, vendors, pricebooks, quotes, salesorders, purchaseorders, invoices, custom, notes

Possible operation types

ALL - Full access to attachments
READ - Get attachment data

Sample Request

Copiedcurl "https://www.zohoapis.com/crm/v2.1/Leads/1000000231009/Attachments"
-X GET
-H "Authorization: Zoho-oauthtoken 1000.8cb99dxxxxxxxxxxxxx9be93.9b8xxxxxxxxxxxxxxxf"
3.0.08.0
CopiedString moduleAPIName = "Leads";
Long recordId = 3477061000005177002l;

//Get instance of AttachmentsOperations Class that takes moduleAPIName and recordId as parameter
AttachmentsOperations attachmentsOperations = new AttachmentsOperations(moduleAPIName, recordId);

//Get instance of ParameterMap Class
ParameterMap paramInstance = new ParameterMap();

//Possible parameters of Get Attachments operation
paramInstance.add(GetAttachmentsParam.PAGE, 1);

paramInstance.add(GetAttachmentsParam.PER_PAGE, 10);

paramInstance.add(GetAttachmentsParam.FIELDS, "id");

//Call getAttachments method that takes paramInstance as parameters
APIResponse < ResponseHandler > response = attachmentsOperations.getAttachments(paramInstance);
Copiedpackage com.zoho.crm.api.sample.restapi.filesandattachments;
import javax.net.ssl.SSLContext;
import org.apache.http.HttpEntity;
import org.apache.http.HttpResponse;
import org.apache.http.client.methods.HttpGet;
import org.apache.http.client.methods.HttpUriRequest;
import org.apache.http.client.utils.URIBuilder;
import org.apache.http.conn.ssl.NoopHostnameVerifier;
import org.apache.http.conn.ssl.SSLConnectionSocketFactory;
import org.apache.http.impl.client.CloseableHttpClient;
import org.apache.http.impl.client.HttpClientBuilder;
import org.apache.http.util.EntityUtils;
public class FilesandAttachmentsAPIs 
{
	public static void main(String[] args) 
	{
		try
		{
			HttpClientBuilder httpClientBuilder = HttpClientBuilder.create();
			SSLContext sslContext = SSLContext.getDefault();
			SSLConnectionSocketFactory sslConnectionSocketFactory = new SSLConnectionSocketFactory(sslContext, NoopHostnameVerifier.INSTANCE);
			CloseableHttpClient httpclient = httpClientBuilder.setSSLSocketFactory(sslConnectionSocketFactory).build();
			URIBuilder uriBuilder = new URIBuilder("https://www.zohoapis.com/crm/v2.1/Leads/34770617711001/Attachments");
			uriBuilder.addParameter("fields", "Modified_Time");
			uriBuilder.addParameter("page", "1");
			uriBuilder.addParameter("per_page", "1");
			HttpUriRequest requestObj = new HttpGet(uriBuilder.build());
			requestObj.addHeader("Authorization", "Zoho-oauthtoken 1000.xxxxxxx.xxxxxxx");
			HttpResponse response = httpclient.execute(requestObj);
			HttpEntity responseEntity = response.getEntity();
			System.out.println("HTTP Status Code : " + response.getStatusLine().getStatusCode());
			if(responseEntity != null)
			{
				Object responseObject = EntityUtils.toString(responseEntity);
				String responseString = responseObject.toString();
				System.out.println(responseString);
			}
		}
		catch(Exception ex)
		{
			ex.printStackTrace();
		}
	}
}
4.0.04.x
Copied//Get instance of AttachmentsOperations Class that takes recordId and moduleAPIName as parameter
$attachmentOperations = new AttachmentsOperations($moduleAPIName, $recordId);
//Get instance of ParameterMap Class
$paramInstance = new ParameterMap();
//Possible parameters of Get Attachments Operation
// $paramInstance->add(GetAttachmentsParam::fields(), "id,Modified_Time");
$paramInstance->add(GetAttachmentsParam::page(), 1);
$paramInstance->add(GetAttachmentsParam::perPage(), 100);
//Call getAttachments method that takes ParameterMap instance as parameter
$response = $attachmentOperations->getAttachments($paramInstance);
Copied<?php
class GetAttachments{
    
    public function execute(){
        $curl_pointer = curl_init();
        
        $curl_options = array();
        $url = "https://www.zohoapis.com/crm/v2.1/Leads/3524033000005495065/Attachments?";
        $parameters = array();
        $parameters["fields"]="id";
        $parameters["page"]="1";
        $parameters["per_page"]="10";
        
        foreach ($parameters as $key=>$value){
            $url =$url.$key."=".$value."&";
        }
        $curl_options[CURLOPT_URL] = $url;
        $curl_options[CURLOPT_RETURNTRANSFER] = true;
        $curl_options[CURLOPT_HEADER] = 1;
        $curl_options[CURLOPT_CUSTOMREQUEST] = "GET";
        $headersArray = array();
        $headersArray[]= "If-Modified-Since".":"."2020-10-12T17:59:50+05:30";
        $headersArray[] = "Authorization". ":" . "Zoho-oauthtoken " ."1000.30f3a589XXXXXXXXXXXXXXXXXXX4077.dc5XXXXXXXXXXXXXXXXXXXee9e7c171c";
        $curl_options[CURLOPT_HTTPHEADER]=$headersArray;
        
        curl_setopt_array($curl_pointer, $curl_options);
        
        $result = curl_exec($curl_pointer);
        $responseInfo = curl_getinfo($curl_pointer);
        curl_close($curl_pointer);
        list ($headers, $content) = explode("\r\n\r\n", $result, 2);
        if(strpos($headers," 100 Continue")!==false){
            list( $headers, $content) = explode( "\r\n\r\n", $content , 2);
        }
        $headerArray = (explode("\r\n", $headers, 50));
        $headerMap = array();
        foreach ($headerArray as $key) {
            if (strpos($key, ":") != false) {
                $firstHalf = substr($key, 0, strpos($key, ":"));
                $secondHalf = substr($key, strpos($key, ":") + 1);
                $headerMap[$firstHalf] = trim($secondHalf);
            }
        }
        $jsonResponse = json_decode($content, true);
        if ($jsonResponse == null && $responseInfo['http_code'] != 204) {
            list ($headers, $content) = explode("\r\n\r\n", $content, 2);
            $jsonResponse = json_decode($content, true);
        }
        var_dump($headerMap);
        var_dump($jsonResponse);
        var_dump($responseInfo['http_code']);
        
    }
    
}
(new GetAttachments())->execute();
3.0.08.x
Copied//Get instance of AttachmentsOperations Class that takes moduleAPIName and recordId as parameter
AttachmentsOperations attachmentsOperations = new AttachmentsOperations (moduleAPIName, recordId);
//Get instance of ParameterMap Class
ParameterMap paramInstance = new ParameterMap();
paramInstance.Add(GetAttachmentsParam.PAGE, 1);
paramInstance.Add(GetAttachmentsParam.PER_PAGE, 20);
List<string> fields = new List<string>() { "Modified_Time", "File_Name", "Created_By" };
foreach (string name in fields)
{
paramInstance.Add(GetAttachmentsParam.FIELDS, name);
}
//Call GetAttachments method
APIResponse<API.Attachments.ResponseHandler> response = attachmentsOperations.GetAttachments(paramInstance);
Copiedusing System;
using System.IO;
using System.Net;
namespace Com.Zoho.Crm.API.Sample.RestAPI.FilesandAttachments
{
    public class FilesandAttachmentsAPIs
    {
        public static void GetListofAttachments()
        {
            HttpWebRequest request = (HttpWebRequest)WebRequest.Create("https://www.zohoapis.com/crm/v2.1/Leads/34770617711001/Attachments?fields=Modified_Time&page=1&per_page=5");
            request.Method = "GET";
            request.Headers["Authorization"] = "Zoho-oauthtoken 1000.abfeXXXXXXXXXXX2asw.XXXXXXXXXXXXXXXXXXsdc2";
            request.KeepAlive = true;
            HttpWebResponse response;
            try
            {
                response = (HttpWebResponse)request.GetResponse();
            }
            catch (WebException e)
            {
                if (e.Response == null) { throw; }
                response = (HttpWebResponse)e.Response;
            }
            HttpWebResponse responseEntity = response;
            Console.WriteLine("HTTP Status Code : " + (int)response.StatusCode);
            string responsestring = new StreamReader(responseEntity.GetResponseStream()).ReadToEnd();
            responseEntity.Close();
            Console.WriteLine(responsestring);
        }
    }
}
3.0.03.x.x
Copied# Get instance of AttachmentsOperations Class that takes module_api_name and record_id as parameters
attachments_operations = AttachmentsOperations(module_api_name, record_id)
# Possible parameters for Get Attachments Operation
param_instance = ParameterMap()
param_instance.add(GetAttachmentsParam.fields, "id")
param_instance.add(GetAttachmentsParam.page, 2)
param_instance.add(GetAttachmentsParam.per_page, 10)
# Call get_attachments method that takes ParameterMap instance as parameter
response = attachments_operations.get_attachments(param_instance)
Copieddef get_attachments():
    import requests

    url = 'https://www.zohoapis.com/crm/v2.1/Leads/3409643000002267003/Attachments'

    headers = {
        'Authorization': 'Zoho-oauthtoken 1000.04be928e4a96XXXXXXXXXXXXX68.0b9eXXXXXXXXXXXX60396e268'
    }

    parameters = {
        'fields': 'id,Modified_Time',
        'page': 1,
        'per_page': 20
    }

    response = requests.get(url=url, headers=headers, params=parameters)

    if response is not None:
        print("HTTP Status Code : " + str(response.status_code))

        print(response.json())

get_attachments()
1.0.010.x
Copied//Get instance of AttachmentsOperations Class that takes recordId and moduleAPIName as parameter
let attachmentsOperations = new AttachmentsOperations(moduleAPIName, recordID);
//Get instance of ParameterMap Class
let paramInstance = new ParameterMap();
//Possible parameters of Get Attachments Operation
paramInstance.add(GetAttachmentsParam.FIELDS, "id");
paramInstance.add(GetAttachmentsParam.PAGE, 1);
paramInstance.add(GetAttachmentsParam.PER_PAGE, 10);
//Call getAttachments method that takes ParameterMap instance as parameter
let response = await attachmentsOperations.getAttachments(paramInstance);
Copiedasync function getAttachments() {
    const got = require("got");

    let url = 'https://www.zohoapis.com/crm/v2.1/Leads/3409643000002267003/Attachments'

    let headers = {
        Authorization : "Zoho-oauthtoken 1000.8cb99dxxxxxxxxxxxxx9be93.9b8xxxxxxxxxxxxxxxf"
    }

    let parameters = {
        fields : 'id,Modified_Time',
        page : 1,
        per_page : 20
    }

    let requestDetails = {
        method : "GET",
        headers : headers,
        searchParams : parameters,
        throwHttpErrors : false
    }
    
    let response = await got(url, requestDetails)
    
    if(response != null) {
        console.log(response.statusCode);
        console.log(response.body);
    }  
}
getAttachments()
2.1.0
Copied# Get instance of AttachmentsOperations Class that takes record_id and module_api_name as parameters
ao = Attachments::AttachmentsOperations.new(module_api_name,record_id)

# Get instance of ParameterMap Class
pm = ParameterMap.new
pm.add(Attachments::AttachmentsOperations::GetAttachmentsParam.page, 1)
pm.add(Attachments::AttachmentsOperations::GetAttachmentsParam.per_page, 1)
# Call get_attachments method
response = ao.get_attachments(pm)
Copiedrequire 'net/http'
require 'json'

class GetAttachments 

    def execute
        parameters ={}
        parameters["fields"]="id"
        parameters["page"]="1"
        parameters["per_page"]="10"
        query_string = parameters.to_a.map { |x| "#{x[0]}=#{x[1]}" }.join('&')
        url= "https://www.zohoapis.com/crm/v2.1/Leads/3524033000005495065/Attachments"
        url += '?' + query_string if !query_string.nil? && (query_string.strip != '')
        url = URI(url)
        req = Net::HTTP::Get.new(url.request_uri)
        http = Net::HTTP.new(url.host, url.port)
        http.use_ssl = true
        headers={}
        headers["Authorization"]="Zoho-oauthtoken 1000.dfa7XXXXXXXXXXXXXXXXXX84f9665840.c176aeXXXXXXXXXXXX13f3d37a84d"
        headers["If-Modified-Since"]="2020-10-12T17:59:50+05:30"
        headers&.each { |key, value| req.add_field(key, value) }
        response=http.request(req)
        status_code = response.code.to_i
        headers = response.each_header.to_h
        print status_code
        print headers
        unless response.body.nil?
            print  response.body
        end
    end
end
GetAttachments.new.execute
Copiedresponse = invokeurl
[
	url: "https://www.zohoapis.com/crm/v2.1/Leads/1000000231009/Attachments"
	type: GET
	connection:"crm_oauth_connection"
];
info response;

Response JSON Keys

  • OwnerJSON object

    Represents the name, ID, and email of the record owner.

  • Modified_Timestring

    Represents the date and time at which the attachment was last modified.

  • File_Namestring

    Represents the name of the attachment.

  • Created_Timestring

    Represents the date and time at which the attachment was added to the record.

  • Sizeinteger

    Represents the size of the attachment.

  • Parent_IdJSON object

    Represents the name and ID of the parent record.

  • $editableboolean

    Represents if the user can edit the attachment.
    true: The user can edit the attachment.
    false: The user cannot edit the attachment.

  • $file_idstring

    Represents the unique file ID of the file in the ZFS.

  • $se_modulestring

    Represents the API name of the parent module.

  • Modified_ByJSON object

    Represents the name, ID, and email of the user who last modified the attachment.

  • idstring

    Represents the unique ID of the related record.

  • Created_ByJSON object

    Represents the name, ID, and email of the user who added the attachment to the record.

Possible Errors

  • INVALID_MODULEHTTP 400

    The module name given seems to be invalid
    Resolution: You have specified an invalid module name or there is no tab permission, or the module could have been removed from the available modules. Specify a valid module API name.

  • INVALID_MODULEHTTP 400

    The given module is not supported in API
    Resolution: The modules such as Documents and Projects are not supported in the current API. (This error will not be shown, once these modules are been supported). Specify a valid module API name.

  • INVALID_URL_PATTERNHTTP 404

    Please check if the URL trying to access is a correct one
    Resolution: The request URL specified is incorrect. Specify a valid request URL. Refer to request URL section above.

  • OAUTH_SCOPE_MISMATCHHTTP 401

    Unauthorized
    Resolution: Client does not have ZohoCRM.modules.attachments.READ scope. Create a new client with valid scope. Refer to scope section above.

  • NO_PERMISSIONHTTP 403

    Permission denied to read attachment details
    Resolution: The user does not have permission to read attachment details. Contact your system administrator.

  • INTERNAL_ERRORHTTP 500

    Internal Server Error
    Resolution: Unexpected and unhandled exception in Server. Contact support team.

  • INVALID_REQUEST_METHODHTTP 400

    The http request method type is not a valid one
    Resolution: You have specified an invalid HTTP method to access the API URL. Specify a valid request method. Refer to endpoints section above.

  • AUTHORIZATION_FAILEDHTTP 400

    User does not have sufficient privilege to read attachments
    Resolution: The user does not have the permission to read attachment details. Contact your system administrator.

Sample Response

Copied{
  "data": [
    {
      "Owner": {
        "name": "Patricia Boyle",
        "id": "4150868000000225013",
        "email": "patricia.b@zylker.com"
      },
      "Modified_Time": "2021-05-03T17:59:02+05:30",
      "File_Name": "0f2b4454e6fea3b4c8fcc82e7d2601b0.jpg",
      "Created_Time": "2021-05-03T17:59:02+05:30",
      "Size": "563181",
      "Parent_Id": {
        "name": "Brian Dolan",
        "id": "4150868000004943003"
      },
      "$editable": true,
      "$sharing_permission": "full_access",
      "$file_id": "1nvs60c82c750d8564edeaf5093ecadff1c9a",
      "$type": "Attachment",
      "$se_module": "Leads",
      "Modified_By": {
        "name": "Patricia Boyle",
        "id": "4150868000000225013",
        "email": "patricia.b@zylker.com"
      },
      "$attachment_type": 0,
      "$state": "save",
      "id": "4150868000005282007",
      "Created_By": {
        "name": "Patricia Boyle",
        "id": "4150868000000225013",
        "email": "patricia.b@zylker.com"
      },
      "$link_url": null
    }
  ],
  "info": {
    "per_page": 200,
    "count": 1,
    "page": 1,
    "more_records": false
  }
}