---
api: 'Open Banking API'
---

# Upload a payment file

Use this endpoint to upload a file for the given file payment consent.

For the format of the CSV file, check the request body details.

:::note
Download an [example CSV file](https://assets.revolut.com/api-docs/oba-api/file-payment-file.csv).
:::

For more information, see [Tutorials: Create a file payment](/docs/guides/build-banking-apps/tutorials/create-a-file-payment#5-upload-the-csv-file).

## Endpoint

POST `/file-payment-consents/{ConsentId}/file`

## Parameters

### header parameters

- `x-fapi-financial-id` (string, required)
  The unique ID of the [ASPSP](/docs/guides/build-banking-apps/glossary) that the request is issued to.
  The ID of Revolut is `001580000103UAvAAM`.

- `x-fapi-customer-last-logged-time` (string, optional)
  The date and time when the [PSU](/docs/guides/build-banking-apps/glossary) last logged in with the [TPP](/docs/guides/build-banking-apps/glossary).
  
  All dates in the HTTP headers are represented as [RFC 7231](https://datatracker.ietf.org/doc/html/rfc7231#section-7.1.1.1) Full Dates.
  For example: <nobr>`Sun, 10 Sep 2017 19:43:31 UTC`</nobr>.

- `x-fapi-customer-ip-address` (string, optional)
  The IP address of the [PSU](/docs/guides/build-banking-apps/glossary) if the PSU is logged in with the [TPP](/docs/guides/build-banking-apps/glossary).

- `x-fapi-interaction-id` (string, optional)
  An [RFC4122](https://datatracker.ietf.org/doc/html/rfc4122) UUID used as a correlation ID.

- `Authorization` (string, required)
  The access token that you've generated.
  For more information, see [Generate an access token](/docs/guides/build-banking-apps/get-started/get-access-token).

- `x-idempotency-key` (string, required)
  Each request is processed only once per `x-idempotency-key`.
  The idempotency key is valid for 24 hours.

- `x-jws-signature` (string, required)
  A [detached JWS signature](/docs/guides/build-banking-apps/tutorials/work-with-json-web-signatures) of the body of the payload.

- `x-customer-user-agent` (string, optional)
  The user agent that the [PSU](/docs/guides/build-banking-apps/glossary) is using.

### path parameters

- `ConsentId` (string, required)
  The ID of the account access consent.

## Request body

### Attributes

## Returns

### 200

File Payment CSV Uploaded

#### Response attributes


## Error responses

| HTTP status code | Description |
| --- | --- |
| 400 | Bad request |
| 401 | Unauthorized |
| 403 | Forbidden |
| 405 | Method Not Allowed |
| 406 | Not Acceptable |
| 415 | Unsupported Media Type |
| 429 | Too Many Requests |
| 500 | Internal Server Error |