> ## Documentation Index > Fetch the complete documentation index at: https://docs.doers.sh/llms.txt > Use this file to discover all available pages before exploring further. # Attach a link > Attaches an external link to a task, project or area. A minimal preview — the address and the site it points at — is stored immediately; the rest of the card is filled in out of band, so a site that refuses the request costs nothing. ## OpenAPI ````yaml https://api.doers.sh/openapi.json post /v2/files openapi: 3.1.0 info: title: Doers API version: 2.0.0 description: >- The open API of Doers: tasks, projects, areas, prioritised context and the day's plan. ## Authentication Every route requires a bearer token, generated from **Settings > API & MCP** in the app: ``` Authorization: Bearer pc_… ``` ## Two date fields, not to be confused - `when` — the **schedule**: `today`, `anytime` (Later), `someday` (Future) or a date. - `deadline` — the **commitment**, independent of the schedule. ## Time zone The server reasons in UTC and does not know yours. Send the `X-PC-Today: YYYY-MM-DD` header (or the `day` argument where it exists) so dated operations use your local day. ## MCP server The same token gives access to the [Model Context Protocol](https://modelcontextprotocol.io) server at `POST https://doers.sh/mcp`, which exposes the same operations as tools for Claude, Cursor and other compatible clients. servers: - url: https://api.doers.sh description: Production. security: - bearerAuth: [] tags: - name: Tasks - name: Projects - name: Areas - name: Headings - name: Comments - name: Realtime - name: Devices - name: Context - name: Plan - name: Sessions - name: Rounds - name: Journal - name: Habits - name: Stats - name: Users - name: Profiles - name: Workspaces - name: Access - name: Activity - name: Tokens - name: Referrals - name: Files - name: Connections - name: Collaborators - name: Links - name: Packages - name: Installs - name: Billing - name: Calendar - name: Coach - name: Marketplace paths: /v2/files: post: tags: - Files summary: Attach a link description: >- Attaches an external link to a task, project or area. A minimal preview — the address and the site it points at — is stored immediately; the rest of the card is filled in out of band, so a site that refuses the request costs nothing. operationId: addFileLink requestBody: required: true content: application/json: schema: type: object properties: name: type: string maxLength: 200 parentId: type: string description: Id of the parent task, project or area. format: uuid pattern: >- ^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$ parentKind: type: string description: Which kind of entity carries the comments. enum: - task - project - area url: type: string description: An `http` or `https` address. maxLength: 2048 format: uri required: - parentId - parentKind - url additionalProperties: false responses: '201': description: Created. content: application/json: schema: type: object properties: file: type: object properties: id: type: string name: type: string url: type: string mime: anyOf: - type: string - type: 'null' createdAt: type: number description: Epoch milliseconds. preview: anyOf: - type: object properties: url: anyOf: - type: string - type: 'null' title: anyOf: - type: string - type: 'null' description: anyOf: - type: string - type: 'null' image: anyOf: - type: string - type: 'null' siteName: anyOf: - type: string - type: 'null' required: - url - title - description - image - siteName additionalProperties: false - type: 'null' description: >- OpenGraph card, filled in out of band. `null` until it is. canRemove: type: boolean external: type: boolean required: - id - name - url - mime - createdAt - preview - canRemove - external additionalProperties: false required: - file additionalProperties: false '400': $ref: '#/components/responses/BadRequest' '401': $ref: '#/components/responses/Unauthorized' '404': $ref: '#/components/responses/NotFound' '429': $ref: '#/components/responses/TooManyRequests' components: responses: BadRequest: content: application/json: schema: $ref: '#/components/schemas/Error' description: >- Invalid request — unreadable body, out-of-range field or unknown parameter. Unauthorized: content: application/json: schema: $ref: '#/components/schemas/Error' description: Token missing, unknown or revoked. NotFound: content: application/json: schema: $ref: '#/components/schemas/Error' description: >- Resource does not exist **or** belongs to another account — the API never distinguishes the two. TooManyRequests: content: application/json: schema: $ref: '#/components/schemas/Error' description: Too many requests. `Retry-After` says how many seconds to wait. schemas: Error: type: object properties: error: type: object properties: code: type: string description: Stable machine-readable code. message: type: string description: Human-readable message. details: type: array description: Per-field detail, present on validation errors. items: type: object properties: field: type: string message: type: string required: - field - message required: - code - message required: - error securitySchemes: bearerAuth: type: http scheme: bearer description: A `pc_…` token generated from Settings > API & MCP. ````