Create a file tag

import app from '@adonisjs/core/services/app'
import { SiteClient } from '@fetchski/attract-cms-sdk'

const site = await app.container.make(SiteClient)
const fileTag = await site.media().createFileTag({ title: 'Marketing Materials' })

{
  "_id": "clx1234567890abcdef",
  "title": "Marketing Materials",
  "slug": "marketing-materials",
  "type": "@apostrophecms/file-tag",
  "archived": false,
  "createdAt": "2026-10-24T09:30:00.000Z",
  "updatedAt": "2026-10-24T09:30:00.000Z",
  "copyOfId": "ckhdscx5900054z9k88uqs16w:en:published",
  "aposShareKey": "k3v9x2m7q1z8w4p6"
}

import app from '@adonisjs/core/services/app'
import { SiteClient } from '@fetchski/attract-cms-sdk'

const site = await app.container.make(SiteClient)
const fileTag = await site.media().createFileTag({ title: 'Marketing Materials' })

{
  "_id": "clx1234567890abcdef",
  "title": "Marketing Materials",
  "slug": "marketing-materials",
  "type": "@apostrophecms/file-tag",
  "archived": false,
  "createdAt": "2026-10-24T09:30:00.000Z",
  "updatedAt": "2026-10-24T09:30:00.000Z",
  "copyOfId": "ckhdscx5900054z9k88uqs16w:en:published",
  "aposShareKey": "k3v9x2m7q1z8w4p6"
}

In your app

A controller answers a route on your app: it calls createFileTag() and returns the answer.

Add the controller

app/controllers/create_file_tag_controller.ts

import { inject } from '@adonisjs/core'
import { SiteClient } from '@fetchski/attract-cms-sdk'

@inject()
export default class CreateFileTagController {
  constructor(protected site: SiteClient) {}

  async handle() {
    return this.site.media().createFileTag({ title: 'Marketing Materials' })
  }
}

The other values are the example’s: take yours from the request, a form or your database.

Add the route

start/routes.ts

import router from '@adonisjs/core/services/router'

const CreateFileTagController = () => import('#controllers/create_file_tag_controller')

router.post('/file-tag', [CreateFileTagController])

Put it behind your auth middleware (.use(middleware.auth())): it acts with your key’s access.

Call it

Your own page’s form or script sends POST /file-tag and gets back its answer as JSON. Test it, below, calls it.

Required parameters

One object, e.g. createFileTag({ title }); leave out the optional fields.

string

required

Required. Tag name.

Optional parameters

AposMode | null | undefined

Optional. Leave it out and the site uses "published". published (the default) or draft. Drafts need a credential that may see them: an API key with the type’s write scope (content:<type>:write), or a signed-in editor. The public and a key with only the read scope get 403. One of draft, published.

string | null | undefined

Optional. Leave it out (or pass null) and it isn’t sent: the site’s default applies. The locale to read or write, e.g. en (default: the site’s default locale).

string | null | undefined

Optional. URL-friendly tag name Left out, it’s made from the title.

boolean | null | undefined

Optional. Leave it out and the site uses false. In the archive: kept, but out of every list and off the site until it is restored. false (or null) for a live document.

string | null | undefined

Optional. Leave it out (or pass null) and it isn’t sent: the site’s default applies. The _id of the piece/page that was copied to create this document (only present if created via _copyingId)

Returns

A FileTag. Built-in file tag piece type for organizing files. Read its properties (fileTag.id): each says whether the site always sends it. The example answer is the site’s wire JSON: one key differs from the property names (_id → id).

string

Always sent.

string

Always sent. Tag name.

string

Always sent. URL-friendly tag name.

string

Always sent.

Date

Always sent. Format: an ISO 8601 date and time.

Date

Always sent. Format: an ISO 8601 date and time.

boolean | null

Sometimes sent: undefined when the site leaves it out, and it can be null. In the archive: kept, but out of every list and off the site until it is restored. false (or null) for a live document.

string | null

Sometimes sent: undefined when the site leaves it out, and it can be null. The _id of the piece/page that was copied to create this document (only present if created via _copyingId)

Sometimes sent: undefined when the site leaves it out, and it can be null. The draft’s preview share key, while its share link is on: the link is the draft’s _url with aposShareKey and aposShareId (the draft’s _id) in its query. Absent otherwise, and on published documents.

Errors

Nothing to catch: the SDK retries what is safe, and throws the rest as the classes below. Your exception handler turns them into your app’s own answers, once for every call (see Map SDK errors to responses); catch only what you want to react to here.

400

The site refused what was sent: errors lists each field’s problem, siteMessage the first.Retried first: No. Read: errors (field → messages), siteMessage.

401

The API key is missing or refused (malformed, revoked, expired), or a signature its signing mode needs is missing or stale.Retried first: No. Read: siteMessage, errorName, data.

403

The key may not do this: a scope it lacks, or an address outside its allowlist. siteMessage names it.Retried first: No. Read: siteMessage, errorName, data.

404

Nothing matches, or the caller may not see it.Retried first: No. Read: siteMessage, errorName, data.

5xx

The site failed (or something in front of it did). Its logs say why.Retried first: No: a write may have landed. Read: siteMessage, errorName, data.

no answer

No answer: DNS, a refused connection, TLS, or the timeout (15 s per attempt by default).Retried first: Only when nothing reached the site (neverConnected()); never after a timeout, when it may have landed. Read: reason, neverConnected.

not sent

The client refused to send it (e.g. a path segment of ..); the site never saw it.Retried first: No. Read: reason (what to change).

any other

Any other status, or a success whose JSON doesn’t match this SDK version’s types (update the SDK).Retried first: No. Read: reason, status.

setup

sites.forSite('acme') named a slug config/attract.ts doesn’t list (with the keys in the database: no row in attract_api_keys).Retried first: No: nothing was sent. Read: message, slug.

setup

The site’s entry is wrong: a malformed baseUrl or key, a key filed under another slug, or no default site. node ace attract:check names the fix.Retried first: No: nothing was sent. Read: message (what to fix).

Behavior

Access: an API key with content:files:write (or a master above it: content:files:all, content:all, admin:all). A signed-in person may call it as far as their own permissions allow; anyone else gets 403.
Rate limit: the key’s own writes-per-minute limit, set when the key is created (default 120); over it, 429 with Retry-After. The client waits and retries for you; you see RateLimited only if that runs out.
Retries: a write is sent again only after a 429 (refused before it acted) or when it never reached the site. After a timeout or a 5xx it may have landed: check before you send it again.
Timeout: 15 s per attempt by default; raise timeout (milliseconds) in config/attract.ts for longer.

Test it

It calls the controller above with the SDK faked: fakeAttract() puts the fake in the container for this one test, and it answers every call with a valid example, so nothing leaves your machine and no key is read. Save it as tests/unit/media_create_file_tag.spec.ts, then run your tests:

tests/unit/media_create_file_tag.spec.ts

import { test } from '@japa/runner'
import app from '@adonisjs/core/services/app'
import { fakeAttract } from '@fetchski/attract-cms-adonis/testing'
import CreateFileTagController from '#controllers/create_file_tag_controller'

test('media.createFileTag', async () => {
  const site = fakeAttract()

  const controller = await app.container.make(CreateFileTagController)
  await controller.handle()

  site.assertCalled('media.createFileTag')
})

Terminal

node ace test

Answer with your own values: fake media.createFileTag with factories.FileTag({...}), the fields you give over a valid example.

tests/unit/media_create_file_tag_answers.spec.ts

import { test } from '@japa/runner'
import { factories, fakeAttract } from '@fetchski/attract-cms-adonis/testing'

test('media.createFileTag answers your values', async ({ assert }) => {
  const site = fakeAttract({
    'media.createFileTag': factories.FileTag({ id: 'Your value' }),
  })

  const fileTag = await site.media().createFileTag({ title: 'Marketing Materials' })
  assert.containSubset(fileTag, { id: 'Your value' })
})

List images

site.media().listImages()

Create an image

site.media().createImage()

Archive images

site.media().archiveImages()

Crop images to a widget’s aspect ratio

site.media().autocropImages()

Copy images to another locale

site.media().localizeImages()

Publish images

site.media().publishImages()

POST /@apostrophecms/file-tag

The endpoint this calls, in the API reference: the HTTP request and answer, and every rule the site checks.

import app from '@adonisjs/core/services/app'
import { SiteClient } from '@fetchski/attract-cms-sdk'

const site = await app.container.make(SiteClient)
const fileTag = await site.media().createFileTag({ title: 'Marketing Materials' })

{
  "_id": "clx1234567890abcdef",
  "title": "Marketing Materials",
  "slug": "marketing-materials",
  "type": "@apostrophecms/file-tag",
  "archived": false,
  "createdAt": "2026-10-24T09:30:00.000Z",
  "updatedAt": "2026-10-24T09:30:00.000Z",
  "copyOfId": "ckhdscx5900054z9k88uqs16w:en:published",
  "aposShareKey": "k3v9x2m7q1z8w4p6"
}

Get started

Using the SDK

Going further

Pages & Site

Content

Media

Forms

Ads & Conversions

Analytics

In your app

Behavior

Test it

List images

Create an image

Archive images

Crop images to a widget’s aspect ratio

Copy images to another locale

Publish images

POST /@apostrophecms/file-tag

In your app

Behavior

Test it

Related

List images

Create an image

Archive images

Crop images to a widget’s aspect ratio

Copy images to another locale

Publish images

POST /@apostrophecms/file-tag