Update session file metadata

PUT/v1/event/{eventId}/sessions/{sessionId}/files/{fileId}

US Region: https://public-api.sessionboard.com · EU Region: https://public-api-eu.sessionboard.com

Updates display title and/or assigned participant. Does not change file bytes — use replace for that. Unknown fields are ignored. Requires write:sessions.

Request example

cURL

curl --request PUT \
  --url 'https://public-api.sessionboard.com/v1/event/{eventId}/sessions/{sessionId}/files/{fileId}' \
  --header 'x-access-token: <api-token>' \
  --header 'Content-Type: application/json' \
  --data '{
  "title": "<string>",
  "assigned_participant_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
}'

JavaScript

const response = await fetch('https://public-api.sessionboard.com/v1/event/{eventId}/sessions/{sessionId}/files/{fileId}', {
  method: 'PUT',
  headers: {
    "x-access-token": "<api-token>",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
    "title": "<string>",
    "assigned_participant_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
  }),
});

const data = await response.json();
console.log(data);

Python

import requests

response = requests.request(
    "PUT",
    "https://public-api.sessionboard.com/v1/event/{eventId}/sessions/{sessionId}/files/{fileId}",
    headers={
        "x-access-token": "<api-token>",
        "Content-Type": "application/json"
    },
    json={
        "title": "<string>",
        "assigned_participant_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
    },
)

print(response.json())

PHP

<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => "https://public-api.sessionboard.com/v1/event/{eventId}/sessions/{sessionId}/files/{fileId}",
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_CUSTOMREQUEST => "PUT",
    CURLOPT_POSTFIELDS => '{
  "title": "<string>",
  "assigned_participant_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
}',
    CURLOPT_HTTPHEADER => [
        "x-access-token: <api-token>",
        "Content-Type: application/json",
    ],
]);

$response = curl_exec($curl);
curl_close($curl);

echo $response;

Go

package main

import (
  "fmt"
  "io"
  "net/http"
  "strings"
)

func main() {
  req, _ := http.NewRequest("PUT", "https://public-api.sessionboard.com/v1/event/{eventId}/sessions/{sessionId}/files/{fileId}", strings.NewReader(`{
  "title": "<string>",
  "assigned_participant_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
}`))
  req.Header.Add("x-access-token", "<api-token>")
  req.Header.Add("Content-Type", "application/json")

  res, _ := http.DefaultClient.Do(req)
  defer res.Body.Close()
  body, _ := io.ReadAll(res.Body)

  fmt.Println(string(body))
}

Java

HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://public-api.sessionboard.com/v1/event/{eventId}/sessions/{sessionId}/files/{fileId}"))
    .header("x-access-token", "<api-token>")
    .header("Content-Type", "application/json")
    .method("PUT", HttpRequest.BodyPublishers.ofString("{\n  \"title\": \"<string>\",\n  \"assigned_participant_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\"\n}"))
    .build();

HttpResponse<String> response = HttpClient.newHttpClient()
    .send(request, HttpResponse.BodyHandlers.ofString());

System.out.println(response.body());

Try it

RegionUS Region — https://public-api.sessionboard.comEU Region — https://public-api-eu.sessionboard.com

Authorization

Send asAPI token (x-access-token)OAuth access token (Bearer)

Token

Your token stays in this page. It is sent only to the region above and is never saved; it is gone when you leave or reload the page.

Path parameters

eventId*

sessionId*

fileId*

Body application/json

{ "title": "<string>", "assigned_participant_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a" }

PUT

Send request

Authorizations

• x-access-tokenstringheader

  Organization API token. Generate from Organization Settings → API Tokens.

• AuthorizationBearer <token>headeror

  OAuth 2.1 access token. Obtained via the OAuth PKCE flow at /oauth/token.

Send one of these. See Authentication.

Path parameters

• eventIdintegerpathrequired

  Event ID

• sessionIdstring<uuid>pathrequired

  Session UUID

• fileIdstring<uuid>pathrequired

  Session file (Content) UUID

Request body

application/jsonrequired

• titlestring | null
• assigned_participant_idstring<uuid> | null

Example

{
  "title": "<string>",
  "assigned_participant_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
}

Responses

200application/json

OK

• dataContent

  A content attachment (file, document, or media) associated with a session.

  Approvals. On events using Approvals (Early Access), a file can be held back until it is approved and its release time has passed. The Session Files endpoints still list a held file, so an integration knows it exists, but return url: null until it is released. Publish only files whose approval_status is approved or not_required. When a file you already published moves to any other status, remove it from your destination.

  Show child attributes

  • idstring<uuid>
  • urlstring<uri> | null

    Download URL. null while Approvals holds the file back (see approval_status), so nothing built on the API can publish it early.

  • titlestring
  • filenamestring
  • sizeinteger
  • mimetypestring
  • typestring | null

    Organizer-facing file type, e.g. presentation, handout, poster, or holding_slide for slides generated by Sessionboard. Filterable with ?type= on the list endpoint.

    Example

    "holding_slide"

  • labelstring | null

    Display label shown on the session's Files tab, e.g. Holding Slide.

    Example

    "Holding Slide"

  • created_atstring<date-time>
  • updated_atstring<date-time>
  • assigned_participant_idstring<uuid> | null

    Contact UUID of the session participant this file is assigned to.

  • assigned_participant_emailstring<email> | null
  • assigned_participant_namestring | null
  • content_slot_idstring<uuid> | null

    The upload slot this file answers — see GET /v1/event/{eventId}/content-slots. Present only while the event uses upload slots; null for events on a single file request, and for files uploaded before slots existed or outside any slot.

  • approval_statusstring

    Approval state, returned by the Session Files endpoints.

    • not_required: not under an approval workflow (no workflow, workflow off, or uploaded before it was turned on).
    • pending: waiting on a reviewer.
    • approved: approved and released.
    • denied: sent back to the uploader for changes.
    • superseded: a newer version replaced it before it was decided.
    • embargoed: approved (or not required) but held until a release time; see embargo_until.

    Only approved and not_required files have a url.

    Allowed values

    "not_required", "pending", "approved", "denied", "superseded", "embargoed"

    Example

    "approved"

  • embargo_untilstring<date-time> | null

    When an embargoed file is released (UTC). null when it is not embargoed, or when it waits for its session to be scheduled (release "when each file's session starts").

400

Validation error

403

Missing write:sessions scope

404

File not found

Response examples

200

{
  "data": {
    "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "url": "https://example.com",
    "title": "<string>",
    "filename": "<string>",
    "size": 123,
    "mimetype": "<string>",
    "type": "holding_slide",
    "label": "Holding Slide",
    "created_at": "2026-01-15T09:30:00Z",
    "updated_at": "2026-01-15T09:30:00Z",
    "assigned_participant_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "assigned_participant_email": "jane@example.com",
    "assigned_participant_name": "<string>",
    "content_slot_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "approval_status": "approved",
    "embargo_until": "2026-01-15T09:30:00Z"
  }
}