Docs

Files: uploads and downloads

Next release. This is built and tested, and ships in the next version. Version 0.5.0 on npm does not have it yet; this page will drop the note when it does.

Forms often need a file: a CV, an invoice, a photo. file_upload attaches one file from your computer to the page's file input — including the common kind hidden behind a styled "Upload" button — and the page reacts exactly as if you had chosen it.

You approve every file

The first call never attaches anything. The side panel asks Attach file "cv.pdf" (120 KB) to "Resume"?; the agent repeats the call once you press Approve once. Each file, each input, every time.

file_upload { "target": { "label": "Resume" }, "path": "C:\\Users\\you\\Documents\\cv.pdf" }
→ USER_CONFIRMATION_REQUIRED · approvalId "a-…"
file_upload { …same…, "approvalId": "a-…" }
→ Attached "cv.pdf" (120 KB) to the "Resume" input.

What is refused, even with approval

A page could try to talk your agent into sending your secrets. These are never uploaded:

• SSH, GPG, AWS, Azure, Kubernetes, Docker and gcloud credential folders;
• browser profiles (cookies, saved passwords) and BrowserZap's own folder;
• id_rsa and other SSH keys, .env files, .netrc, .npmrc, credentials;
• private keys and password stores: .pem, .key, .p12, .pfx, .kdbx, .ppk, .ovpn.

Files must be given by absolute path, exist, and be 50 MB or smaller. To limit uploads to one folder, set BROWSERZAP_UPLOAD_DIR in the agent's MCP configuration.

Downloads

When a click starts a download, the result says so: It started a download: invoice.pdf (still downloading). browser_downloads lists what the browser downloaded during the session — name, size, full path, still downloading or complete — and waitForMs waits for a download to finish, so the agent can use the file next.

browser_downloads { "waitForMs": 30000 }
→ 1 download(s), all complete: invoice.pdf (84 KB).
  path: C:\Users\you\Downloads\invoice.pdf

BrowserZap watches your Downloads folder for files that arrive during the session; it never reads their contents and never lists older files. If Chrome saves somewhere else, set BROWSERZAP_DOWNLOAD_DIR. No extra browser permission is needed.