​

Files and Document Extraction

​

What It Does

• local chat/task/channel attachments;
• OpenResponses input_file parts;
• URL-based file inputs when URL fetch is allowed;
• text, Markdown, HTML, CSV, JSON, and PDF.

​

Configure

• Allow URL files: lets OpenResponses file inputs fetch remote documents.
• Allowed MIME types: restricts file types. Leave empty for the built-in conservative defaults.
• URL allowlist: restricts remote file hosts. Use exact hosts or *.example.com.
• Max bytes / max chars: caps how much data is fetched and injected.
• PDF pages / pixels / text threshold: caps PDF parsing and fallback render.

{
  gateway: {
    http: {
      endpoints: {
        responses: {
          files: {
            allowUrl: true,
            urlAllowlist: ["docs.example.com", "*.trusted.example"],
            allowedMimes: ["text/plain", "text/markdown", "application/pdf"],
            maxBytes: 5242880,
            maxChars: 200000,
            pdf: { maxPages: 4, maxPixels: 4000000, minTextChars: 200 },
          },
        },
      },
    },
  },
}

​

Access Control

• Use Agent > Tools to allow or deny file/media tools per Agent.
• Keep URL fetching disabled or allowlisted when the gateway is reachable from a hosted environment.
• Treat extracted document text as untrusted external content.

​

Related

• Media understanding
• Tools
• Gateway security