# POST /phone/bundles/:bundle_id/document

**Resource:** [Phone](./phone.md)  
**MCP tool:** `upload_phone_bundle_document`  
**Scopes:** `phone:write`  
**Write operation:** yes

Upload the business document to a DRAFT regulatory bundle. Order: create_phone_address, create_phone_bundle, this, then submit_phone_bundle. An Australian mobile business bundle is always rejected without it, and this step is also what attaches the address to the bundle, so skipping it fails review on two counts. For an Australian business send the ASIC company extract as ONE PDF (merge any extra pages in): upload once per bundle, and only while it is a draft. Fails with a 400, and nothing is recorded, if the file does not reach the provider, so a 201 means the file is really there (check get_phone_bundle: the supporting_document item shows mime_type).

## Parameters

| Name | In | Type | Required | Description |
|------|----|------|----------|-------------|
| `bundle_id` | path | string | yes | UUID of the draft bundle, from create_phone_bundle or list_phone_bundles. |
| `file_base64` | body | string | yes | The business document, base64-encoded with no "data:" prefix. For an Australian business this is the company extract from ASIC. Merge every page you want reviewed into ONE PDF: a bundle holds one document. 5 MB maximum. |
| `file_name` | body | string | no | File name shown to the reviewer, e.g. "Acme Pty Ltd - ASIC company extract.pdf". Defaults to "document.pdf". |
| `file_type` | body | string | no | MIME type of the file. Defaults to "application/pdf". PNG and JPEG images are also accepted. |
| `require_approval` | body | boolean | no | Optional. Set true to route this write into the approval queue for human review instead of executing it immediately (returns 202 + an approval_id). Works even when your key/token has permission to execute directly. |

## Request example

```bash
curl -X POST   "https://api.trustpager.com/functions/v1/api/v1/phone/bundles/:bundle_id/document"   -H "Authorization: Bearer YOUR_API_KEY"   -H "Content-Type: application/json"   -d '{"file_base64":"...","file_name":"...","file_type":"..."}'
```

---
Base URL: `https://api.trustpager.com/functions/v1/api/v1` — Auth: `Authorization: Bearer YOUR_API_KEY`