Create object storage bucket

Create a new object storage bucket with an initial key.

POST /buckets

Create object storage bucket

cURL

curl --request POST \
  --url https://cloud.laravel.com/api/buckets \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "name": "<string>",
  "visibility": "private",
  "jurisdiction": "default",
  "key_name": "<string>",
  "key_permission": "read_write",
  "allowed_origins": [
    "<string>"
  ],
  "cors_settings": {
    "allowed_origins": [
      "<string>"
    ],
    "allowed_methods": [
      "GET"
    ],
    "allowed_headers": [
      "<string>"
    ],
    "expose_headers": [
      "<string>"
    ],
    "max_age_seconds": 2
  }
}
'

201

{
  "data": {
    "id": "<string>",
    "type": "filesystems",
    "attributes": {
      "name": "<string>",
      "type": "cloudflare_r2",
      "status": "creating",
      "visibility": "private",
      "jurisdiction": "default",
      "endpoint": "<string>",
      "url": "<string>",
      "allowed_origins": "<string>",
      "cors_settings": "<string>",
      "created_at": "2023-11-07T05:31:56Z"
    },
    "relationships": {
      "keys": {
        "data": [
          {
            "type": "filesystemKeys",
            "id": "<string>"
          }
        ]
      }
    }
  },
  "included": [
    {
      "id": "<string>",
      "type": "filesystemKeys",
      "attributes": {
        "name": "<string>",
        "permission": "read_write",
        "access_key_id": "<string>",
        "access_key_secret": "<string>",
        "created_at": "2023-11-07T05:31:56Z"
      },
      "relationships": {
        "filesystem": {
          "data": {
            "type": "filesystems",
            "id": "<string>"
          }
        }
      }
    }
  ]
}

Authorizations

Authorization · string · header · required

The Bearer Token generated on the Cloud UI.

Body

application/json

name · string · required

Required string length: 3 - 40

Pattern: ^[a-z0-9_-]+$

visibility · enum<string> · required

Available options: private, public

jurisdiction · enum<string> · required

Available options: default, eu

key_name · string · required

Required string length: 3 - 40

key_permission · enum<string> · required

Available options: read_write, read_only

allowed_origins · string<uri>[] | null

This field is deprecated and will be removed May 17th, 2026. Please use cors_settings.allowed_origins instead.

cors_settings · object

Show child attributes

Response

201

application/vnd.api+json

FilesystemResource

data · FilesystemResource · object · required

Show child attributes

included · FilesystemKeyResource · object[]

Show child attributes