Set NEURON_REFERER to your application’s HTTPS URL. Include this header on every request, including backend calls. See required request headers.
This resource is not included in the Agent API OpenAPI document. Confirm its paths, methods, headers, visibility rules, media types, and response fields on your Neuron before using it.
The content resource stores binary files in the name of the authenticated account. Unlike most Agent endpoints, it uses normal HTTP content negotiation and supports PUT, multipart POST, GET, and DELETE.
Resource paths
After an upload, use the returned url for reads, replacements, deletion, and sharing. A contentId can contain / path separators, but its final file extension must match the registered media type.
Authentication
Uploading, replacing, and deleting require the authenticated owner. Reading depends on the stored visibility:
Upload with PUT
Send the file bytes to a chosen resource path. The Content-Type must be recognized by the Neuron, and the extension in contentId must match it.
Omit a caller-selected ID only when using multipart POST; the server then derives one from the content ETag.
Upload with multipart POST
Post multipart/form-data to /Agent/Storage/Content with these fields:
The JavaScript Agent library exposes the same operation as:
Upload response
Both upload methods return a content reference:
Retrieve, replace, or delete
GET {url} returns the original bytes with their stored Content-Type after applying the visibility rule.
PUT {url} replaces the owner’s content and returns a new content reference.
DELETE {url} removes the owner’s content.
Use the ETag to identify versions in application state. A new upload can produce a new ETag even when the URL remains stable.
The server accepts only registered, decodable media types. It rejects server-executable formats including text/markdown, text/x-cssx, and application/x-webscript; serving those from account storage could otherwise cross the boundary into server-side execution.
To inspect the media types supported by the running Neuron, evaluate this in a privileged Script prompt:
Public makes the returned URL anonymously readable. Do not use it for identity attachments, contract evidence, keys, or other confidential data.