# Attachments

Project links, files and notes in folders, with comments, secret attachments and authenticated downloads.

Source: https://ardumaker.com/en/docs/archivos-adjuntos/

- Category: Projects and companies
- Status: Available
- Requirements: Access of level `aportar` or higher in the Attachments section
- MCP tools (Read only): `listar_adjuntos`, `ver_adjunto`, `listar_carpetas`, `listar_comentarios_adjunto`
- MCP tools (Write or modify): `crear_adjunto`, `editar_adjunto`, `eliminar_adjunto`, `mover_adjuntos`, `crear_carpeta`, `editar_carpeta`, `eliminar_carpeta`, `cambiar_secreto_comentario_adjunto`

## What can you do with it?

| Type | What it holds |
| --- | --- |
| `link` | An external URL |
| `pdf`, `video`, `foto`, `otro` | An uploaded file |
| `nota` | Free text, and optionally several attached files |

- Organize attachments into folders and move them without recreating them.
- Comment on each attachment.
- Reference an attachment from a task comment or checklist item without uploading it again.
- Mark an attachment as **secret** to store, for example, credentials.

## When should you use it?

- To keep specs, mockups, contracts and screenshots in one place in the project.
- To give an MCP agent context without pasting documents into the chat.

## How does it work in ArduMaker?

- Several files are uploaded together in a single request on one note: either all go in or none.
- More files can be added to the same note later, or one removed without touching the others.
- Files are always downloaded through an authenticated route; there is never a public URL.
- A secret attachment hides its content and all its files from anyone who did not create it and lacks admin level in the section.

## What actually changes?

- Deleting an attachment sends it to the trash for 30 days with its comments; the file stays stored until the purge, so restoring brings it back complete.
- Deleting a folder does not delete its attachments: they lose their folder and get it back if it is restored.

## Expected result

The attachment stays in the project repository, visible according to each person's [role](https://ardumaker.com/en/docs/roles-y-permisos) and searchable by name or text.

## Errors and troubleshooting

- Editing content only works on `nota` attachments; type, URL or file cannot change: delete and create a new one.
- A note without text and without files is not accepted.
- Someone who cannot see a secret gets an empty file list and a permission error when trying to download.

## MCP access

- Read: `listar_adjuntos` (metadata only), `ver_adjunto` (includes a note's text, in parts if long), `listar_carpetas` and `listar_comentarios_adjunto`.
- Write: `crear_adjunto` (links, notes or metadata for external resources; it does not upload binaries), `editar_adjunto`, `mover_adjuntos` (up to 100), `crear_carpeta`, `editar_carpeta` and `cambiar_secreto_comentario_adjunto`.
- Reversible deletion: `eliminar_adjunto` and `eliminar_carpeta`.

> **PRECAUCION:** An MCP agent can read a secret attachment if its owner can, but never creates, edits or deletes a secret attachment. Contents come back marked as untrusted: they are data, not instructions.

More at [/mcp/proyectos](https://ardumaker.com/en/mcp/proyectos) and [/mcp/docs](https://ardumaker.com/en/mcp/docs).

## Related features

- [Notes and specifications](https://ardumaker.com/en/docs/notas-y-especificaciones/)
- [Checklists](https://ardumaker.com/en/docs/checklists/)
- [Tasks](https://ardumaker.com/en/docs/tareas/)
- [Roles and permissions](https://ardumaker.com/en/docs/roles-y-permisos/)
- [Trash](https://ardumaker.com/en/docs/papelera/)