> ## Documentation Index > Fetch the complete documentation index at: https://docs.brudcast.com/llms.txt > Use this file to discover all available pages before exploring further. # Upload a contact import file > Stores a CSV, reads its headers and row count, and guesses a field mapping from the headers. Nothing is imported yet: this creates a draft that the preview and start endpoints work against, and a draft never appears in the imports listing until it is started. Requires the `contacts:write` scope. ## OpenAPI ````yaml /api-reference/openapi.json post /api/v1/user/contact-imports/upload openapi: 3.0.0 info: title: Brudcast API version: 1.0.0 servers: - url: https://core-service.prod.brudcast.com description: Production security: [] tags: - name: Analytics x-displayName: Analytics - name: Campaigns x-displayName: Campaigns - name: Contacts x-displayName: Contacts - name: Mailboxes x-displayName: Mailboxes - name: Messages x-displayName: Messages - name: Sender Identities x-displayName: Sender Identities - name: Sending Domains x-displayName: Sending Domains - name: Templates x-displayName: Templates - name: Webhooks x-displayName: Webhooks paths: /api/v1/user/contact-imports/upload: post: tags: - Contacts summary: Upload a contact import file description: >- Stores a CSV, reads its headers and row count, and guesses a field mapping from the headers. Nothing is imported yet: this creates a draft that the preview and start endpoints work against, and a draft never appears in the imports listing until it is started. Requires the `contacts:write` scope. parameters: - in: header name: X-Organization-Id required: false description: >- Required when authenticating with an access token. Optional with an API key, whose own organization binding is authoritative; a value contradicting it is refused with 403. schema: type: string format: uuid requestBody: content: multipart/form-data: schema: type: object required: - file properties: file: type: string format: binary description: A CSV file of at most 10mb responses: '201': description: '' content: application/json: schema: $ref: '#/components/schemas/ContactImportUploadDataResponse' '400': description: No file was sent, or it is not a CSV, or it is larger than 10mb content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' '401': description: The credential is missing, malformed, revoked or expired content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' '403': description: >- The key lacks the scope the endpoint requires, or the organization does not match the credential content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' '422': description: The payload or query string failed validation content: application/json: schema: $ref: '#/components/schemas/ValidationErrorResponse' '429': description: >- Rate limit exceeded; retry after the number of seconds in `retryAfter` content: application/json: schema: $ref: '#/components/schemas/RateLimitErrorResponse' security: - apiKey: [] - apiKeyBearer: [] components: schemas: ContactImportUploadDataResponse: type: object properties: success: type: boolean example: true message: type: string data: $ref: '#/components/schemas/ContactImportUploadData' required: - success - message - data ErrorResponse: type: object properties: success: type: boolean example: false message: type: string example: Resource not found code: type: string enum: - E_VALIDATION_ERROR - E_UNAUTHORIZED_ACCESS - E_UNAUTHORIZED - E_FORBIDDEN - E_INSUFFICIENT_SCOPE - E_ROW_NOT_FOUND - E_TOO_MANY_REQUESTS - E_BUSINESS_RULE_VIOLATION - E_CAMPAIGN_NOT_SENDABLE - INSUFFICIENT_CREDITS - SUBSCRIPTION_REQUIRED example: E_ROW_NOT_FOUND required: - success - message - code ValidationErrorResponse: type: object properties: success: type: boolean example: false message: type: string example: The payload is invalid code: type: string enum: - E_VALIDATION_ERROR - E_UNAUTHORIZED_ACCESS - E_UNAUTHORIZED - E_FORBIDDEN - E_INSUFFICIENT_SCOPE - E_ROW_NOT_FOUND - E_TOO_MANY_REQUESTS - E_BUSINESS_RULE_VIOLATION - E_CAMPAIGN_NOT_SENDABLE - INSUFFICIENT_CREDITS - SUBSCRIPTION_REQUIRED example: E_VALIDATION_ERROR errors: type: array items: $ref: '#/components/schemas/ValidationErrorItem' required: - success - message - code - errors RateLimitErrorResponse: type: object properties: success: type: boolean example: false message: type: string example: Too many requests code: type: string enum: - E_VALIDATION_ERROR - E_UNAUTHORIZED_ACCESS - E_UNAUTHORIZED - E_FORBIDDEN - E_INSUFFICIENT_SCOPE - E_ROW_NOT_FOUND - E_TOO_MANY_REQUESTS - E_BUSINESS_RULE_VIOLATION - E_CAMPAIGN_NOT_SENDABLE - INSUFFICIENT_CREDITS - SUBSCRIPTION_REQUIRED example: E_TOO_MANY_REQUESTS retryAfter: type: number example: 60 required: - success - message - code - retryAfter ContactImportUploadData: type: object properties: upload: $ref: '#/components/schemas/ContactImportUpload' required: - upload ValidationErrorItem: type: object properties: field: type: string example: emailAddress rule: type: string example: email message: type: string example: The emailAddress field must be a valid email address required: - field - rule - message ContactImportUpload: type: object properties: id: type: string format: uuid description: Identifier to send back as `uploadId` when the import is started fileName: type: string example: subscribers.csv totalRows: type: number description: Data rows in the file, excluding the header csvHeaders: type: array items: type: string description: Column headers read from the first row suggestedMappings: type: array items: $ref: '#/components/schemas/ContactImportFieldMapping' description: Mappings guessed from the headers, offered as a starting point required: - id - fileName - totalRows - csvHeaders - suggestedMappings ContactImportFieldMapping: type: object properties: csvHeader: type: string example: Email Address brudcastField: type: string example: email required: - csvHeader - brudcastField securitySchemes: apiKey: type: apiKey in: header name: X-API-Key description: >- An organization API key, prefixed `bk_live_`. Takes precedence over `Authorization` when both are sent. The key is bound to one organization, and the scopes it was issued with are enforced per endpoint. apiKeyBearer: type: http scheme: bearer bearerFormat: bk_live_... description: >- The same organization API key sent as `Authorization: Bearer bk_live_...`. Accepted only when the value begins with `bk_` and no `X-API-Key` header is present. ````