Sites

Commit source to a site's branch

Commits the folder’s whole source tree onto the Git ref the branch owns on its parent’s repository, built on base_commit, and answers the new commit. An editor’s Git credential only reads the repository, so a builder such as the Fluid CLI sends an editor’s source here instead of pushing it, then starts the branch’s bundle from the commit. The ref is always the branch’s own; the request never names one, so nothing but the branch’s ref is written. A commit from a head that is not the ref’s head is refused, so a commit never replaces commits it was not made from: pull the branch and publish again.

Bearer only: a request on the cookie mount is refused with 403. It answers 404 unless staging is released to the member’s company, and for a site or branch whose drafts the member may not edit.

POST

api

member

v2026-10

sites

{site_id}

branches

{slug}

source-commits

Commit source to a site's branch

curl --request POST \
  --url https://api.fluid.app/api/member/v2026-10/sites/{site_id}/branches/{slug}/source-commits \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "base_commit": "4f1c2a9e8b7d6c5b4a3f2e1d0c9b8a7f6e5d4c3b",
  "message": "Edit the home page",
  "files": {
    "index.html": "PGgxPkhpPC9oMT4="
  }
}
'

import requests

url = "https://api.fluid.app/api/member/v2026-10/sites/{site_id}/branches/{slug}/source-commits"

payload = {
    "base_commit": "4f1c2a9e8b7d6c5b4a3f2e1d0c9b8a7f6e5d4c3b",
    "message": "Edit the home page",
    "files": { "index.html": "PGgxPkhpPC9oMT4=" }
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    base_commit: '4f1c2a9e8b7d6c5b4a3f2e1d0c9b8a7f6e5d4c3b',
    message: 'Edit the home page',
    files: {'index.html': 'PGgxPkhpPC9oMT4='}
  })
};

fetch('https://api.fluid.app/api/member/v2026-10/sites/{site_id}/branches/{slug}/source-commits', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.fluid.app/api/member/v2026-10/sites/{site_id}/branches/{slug}/source-commits",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'base_commit' => '4f1c2a9e8b7d6c5b4a3f2e1d0c9b8a7f6e5d4c3b',
    'message' => 'Edit the home page',
    'files' => [
        'index.html' => 'PGgxPkhpPC9oMT4='
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.fluid.app/api/member/v2026-10/sites/{site_id}/branches/{slug}/source-commits"

	payload := strings.NewReader("{\n  \"base_commit\": \"4f1c2a9e8b7d6c5b4a3f2e1d0c9b8a7f6e5d4c3b\",\n  \"message\": \"Edit the home page\",\n  \"files\": {\n    \"index.html\": \"PGgxPkhpPC9oMT4=\"\n  }\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.fluid.app/api/member/v2026-10/sites/{site_id}/branches/{slug}/source-commits")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"base_commit\": \"4f1c2a9e8b7d6c5b4a3f2e1d0c9b8a7f6e5d4c3b\",\n  \"message\": \"Edit the home page\",\n  \"files\": {\n    \"index.html\": \"PGgxPkhpPC9oMT4=\"\n  }\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.fluid.app/api/member/v2026-10/sites/{site_id}/branches/{slug}/source-commits")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"base_commit\": \"4f1c2a9e8b7d6c5b4a3f2e1d0c9b8a7f6e5d4c3b\",\n  \"message\": \"Edit the home page\",\n  \"files\": {\n    \"index.html\": \"PGgxPkhpPC9oMT4=\"\n  }\n}"

response = http.request(request)
puts response.read_body

{
  "status": 201,
  "data": {
    "commit": "9a8b7c6d5e4f3a2b1c0d9e8f7a6b5c4d3e2f1a0b"
  },
  "meta": {
    "request_uuid": "0192f4c8-5b6c-7d74-a3e8-0f1a2b3c4d5e",
    "timestamp": "2026-11-13T10:00:00Z"
  }
}

{
  "status": 123,
  "error": {
    "message": "<string>",
    "details": {}
  },
  "meta": {
    "request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "timestamp": "2023-11-07T05:31:56Z"
  }
}

{
  "status": 123,
  "error": {
    "message": "<string>",
    "details": {}
  },
  "meta": {
    "request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "timestamp": "2023-11-07T05:31:56Z"
  }
}

{
  "status": 123,
  "error": {
    "message": "<string>",
    "details": {}
  },
  "meta": {
    "request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "timestamp": "2023-11-07T05:31:56Z"
  }
}

{
  "status": 409,
  "error": {
    "message": "The branch has commits this source was not made from; pull the branch and publish again",
    "details": {
      "error": "stale_source"
    }
  },
  "meta": {
    "request_uuid": "0192f4c8-5b6c-7d74-a3e8-0f1a2b3c4d5e",
    "timestamp": "2026-11-13T10:00:00Z"
  }
}

{
  "status": 123,
  "error": {
    "message": "<string>",
    "details": {}
  },
  "meta": {
    "request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "timestamp": "2023-11-07T05:31:56Z"
  }
}

{
  "status": 123,
  "error": {
    "message": "<string>",
    "details": {}
  },
  "meta": {
    "request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "timestamp": "2023-11-07T05:31:56Z"
  }
}

Authorizations

Authorization

string

header

required

A member credential in the Authorization: Bearer header: a member session JWT, a portal JWT whose login is linked to a membership in that company, an opaque member token, or a verified One Auth identity access token. The credential alone identifies the member and company. Member session JWTs, and portal JWTs the server minted read-only, are refused with 403 on every write.

Path Parameters

site_id

string<uuid>

required

Public id of one of the member's sites.

slug

string

required

Slug of one of the site's branches.

Required string length: 1 - 40

Pattern: ^[a-z0-9]+(-[a-z0-9]+)*$

Body

application/json

The folder's whole source tree, committed onto the branch's own ref from the head it was made from.

base_commit

string

required

The full sha of the branch ref's head the source was made from. A commit from any other head is refused as stale_source.

Pattern: ^[0-9a-f]{40}$

message

string

required

The commit message.

Required string length: 1 - 1000

files

object

required

Each file of the folder, its path relative to the folder's root (no leading slash, no . or .. segment, nothing under .git) to its content in Base64. A path the base commit holds that is not here is deleted, except dotfiles. The files hold at most 25 MiB decoded.

Show child attributes

Response

The commit was made on the branch's ref.

The commit made on the branch's ref.

status

integer

required

HTTP status code (mirrors the response status line).

data

object

required

The commit a source commit made.

Show child attributes

meta

object

required

Envelope metadata present on every response.

Show child attributes

Commit source to a site's branch

curl --request POST \
  --url https://api.fluid.app/api/member/v2026-10/sites/{site_id}/branches/{slug}/source-commits \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "base_commit": "4f1c2a9e8b7d6c5b4a3f2e1d0c9b8a7f6e5d4c3b",
  "message": "Edit the home page",
  "files": {
    "index.html": "PGgxPkhpPC9oMT4="
  }
}
'

import requests

url = "https://api.fluid.app/api/member/v2026-10/sites/{site_id}/branches/{slug}/source-commits"

payload = {
    "base_commit": "4f1c2a9e8b7d6c5b4a3f2e1d0c9b8a7f6e5d4c3b",
    "message": "Edit the home page",
    "files": { "index.html": "PGgxPkhpPC9oMT4=" }
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    base_commit: '4f1c2a9e8b7d6c5b4a3f2e1d0c9b8a7f6e5d4c3b',
    message: 'Edit the home page',
    files: {'index.html': 'PGgxPkhpPC9oMT4='}
  })
};

fetch('https://api.fluid.app/api/member/v2026-10/sites/{site_id}/branches/{slug}/source-commits', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.fluid.app/api/member/v2026-10/sites/{site_id}/branches/{slug}/source-commits",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'base_commit' => '4f1c2a9e8b7d6c5b4a3f2e1d0c9b8a7f6e5d4c3b',
    'message' => 'Edit the home page',
    'files' => [
        'index.html' => 'PGgxPkhpPC9oMT4='
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.fluid.app/api/member/v2026-10/sites/{site_id}/branches/{slug}/source-commits"

	payload := strings.NewReader("{\n  \"base_commit\": \"4f1c2a9e8b7d6c5b4a3f2e1d0c9b8a7f6e5d4c3b\",\n  \"message\": \"Edit the home page\",\n  \"files\": {\n    \"index.html\": \"PGgxPkhpPC9oMT4=\"\n  }\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.fluid.app/api/member/v2026-10/sites/{site_id}/branches/{slug}/source-commits")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"base_commit\": \"4f1c2a9e8b7d6c5b4a3f2e1d0c9b8a7f6e5d4c3b\",\n  \"message\": \"Edit the home page\",\n  \"files\": {\n    \"index.html\": \"PGgxPkhpPC9oMT4=\"\n  }\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.fluid.app/api/member/v2026-10/sites/{site_id}/branches/{slug}/source-commits")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"base_commit\": \"4f1c2a9e8b7d6c5b4a3f2e1d0c9b8a7f6e5d4c3b\",\n  \"message\": \"Edit the home page\",\n  \"files\": {\n    \"index.html\": \"PGgxPkhpPC9oMT4=\"\n  }\n}"

response = http.request(request)
puts response.read_body

{
  "status": 201,
  "data": {
    "commit": "9a8b7c6d5e4f3a2b1c0d9e8f7a6b5c4d3e2f1a0b"
  },
  "meta": {
    "request_uuid": "0192f4c8-5b6c-7d74-a3e8-0f1a2b3c4d5e",
    "timestamp": "2026-11-13T10:00:00Z"
  }
}

{
  "status": 123,
  "error": {
    "message": "<string>",
    "details": {}
  },
  "meta": {
    "request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "timestamp": "2023-11-07T05:31:56Z"
  }
}

{
  "status": 123,
  "error": {
    "message": "<string>",
    "details": {}
  },
  "meta": {
    "request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "timestamp": "2023-11-07T05:31:56Z"
  }
}

{
  "status": 123,
  "error": {
    "message": "<string>",
    "details": {}
  },
  "meta": {
    "request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "timestamp": "2023-11-07T05:31:56Z"
  }
}

{
  "status": 409,
  "error": {
    "message": "The branch has commits this source was not made from; pull the branch and publish again",
    "details": {
      "error": "stale_source"
    }
  },
  "meta": {
    "request_uuid": "0192f4c8-5b6c-7d74-a3e8-0f1a2b3c4d5e",
    "timestamp": "2026-11-13T10:00:00Z"
  }
}

{
  "status": 123,
  "error": {
    "message": "<string>",
    "details": {}
  },
  "meta": {
    "request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "timestamp": "2023-11-07T05:31:56Z"
  }
}

{
  "status": 123,
  "error": {
    "message": "<string>",
    "details": {}
  },
  "meta": {
    "request_uuid": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "timestamp": "2023-11-07T05:31:56Z"
  }
}

Overview

Storefront

Commerce

Checkout

Member API

Member Sites APIs

Messaging

Cowork

People

Payments

DAM

Website

Portal

Mobile app

Content and tools

Analytics

Sales channels

Settings

FairShare SDK

Droplets

Developers

Unsorted endpoints

Portal & Widgets

Commit source to a site's branch

Authorizations

Path Parameters

Body

Response