Redact

Redact PDF pages

curl --request POST \
  --url https://api.gonitro.dev/transformations \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: multipart/form-data' \
  --form method=redact \
  --form 'params={
  "redactions": [
    {
      "pageIndex": 0,
      "boundingBox": [
        100,
        100,
        200,
        120
      ]
    },
    {
      "pageIndex": 1,
      "boundingBox": [
        50,
        50,
        150,
        70
      ]
    }
  ]
}' \
  --form 'file=<string>'

import requests

url = "https://api.gonitro.dev/transformations"

payload = "-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"method\"\r\n\r\nredact\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"params\"\r\n\r\n{\r\n  \"redactions\": [\r\n    {\r\n      \"pageIndex\": 0,\r\n      \"boundingBox\": [\r\n        100,\r\n        100,\r\n        200,\r\n        120\r\n      ]\r\n    },\r\n    {\r\n      \"pageIndex\": 1,\r\n      \"boundingBox\": [\r\n        50,\r\n        50,\r\n        150,\r\n        70\r\n      ]\r\n    }\r\n  ]\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"file\"\r\n\r\n<string>\r\n-----011000010111000001101001--"
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "multipart/form-data"
}

response = requests.post(url, data=payload, headers=headers)

print(response.text)

const form = new FormData();
form.append('method', 'redact');
form.append('params', '{
  "redactions": [
    {
      "pageIndex": 0,
      "boundingBox": [
        100,
        100,
        200,
        120
      ]
    },
    {
      "pageIndex": 1,
      "boundingBox": [
        50,
        50,
        150,
        70
      ]
    }
  ]
}');
form.append('file', '<string>');

const options = {method: 'POST', headers: {Authorization: 'Bearer <token>'}};

options.body = form;

fetch('https://api.gonitro.dev/transformations', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.gonitro.dev/transformations",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => "-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"method\"\r\n\r\nredact\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"params\"\r\n\r\n{\r\n  \"redactions\": [\r\n    {\r\n      \"pageIndex\": 0,\r\n      \"boundingBox\": [\r\n        100,\r\n        100,\r\n        200,\r\n        120\r\n      ]\r\n    },\r\n    {\r\n      \"pageIndex\": 1,\r\n      \"boundingBox\": [\r\n        50,\r\n        50,\r\n        150,\r\n        70\r\n      ]\r\n    }\r\n  ]\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"file\"\r\n\r\n<string>\r\n-----011000010111000001101001--",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: multipart/form-data"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.gonitro.dev/transformations"

	payload := strings.NewReader("-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"method\"\r\n\r\nredact\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"params\"\r\n\r\n{\r\n  \"redactions\": [\r\n    {\r\n      \"pageIndex\": 0,\r\n      \"boundingBox\": [\r\n        100,\r\n        100,\r\n        200,\r\n        120\r\n      ]\r\n    },\r\n    {\r\n      \"pageIndex\": 1,\r\n      \"boundingBox\": [\r\n        50,\r\n        50,\r\n        150,\r\n        70\r\n      ]\r\n    }\r\n  ]\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"file\"\r\n\r\n<string>\r\n-----011000010111000001101001--")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.gonitro.dev/transformations")
  .header("Authorization", "Bearer <token>")
  .body("-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"method\"\r\n\r\nredact\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"params\"\r\n\r\n{\r\n  \"redactions\": [\r\n    {\r\n      \"pageIndex\": 0,\r\n      \"boundingBox\": [\r\n        100,\r\n        100,\r\n        200,\r\n        120\r\n      ]\r\n    },\r\n    {\r\n      \"pageIndex\": 1,\r\n      \"boundingBox\": [\r\n        50,\r\n        50,\r\n        150,\r\n        70\r\n      ]\r\n    }\r\n  ]\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"file\"\r\n\r\n<string>\r\n-----011000010111000001101001--")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.gonitro.dev/transformations")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request.body = "-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"method\"\r\n\r\nredact\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"params\"\r\n\r\n{\r\n  \"redactions\": [\r\n    {\r\n      \"pageIndex\": 0,\r\n      \"boundingBox\": [\r\n        100,\r\n        100,\r\n        200,\r\n        120\r\n      ]\r\n    },\r\n    {\r\n      \"pageIndex\": 1,\r\n      \"boundingBox\": [\r\n        50,\r\n        50,\r\n        150,\r\n        70\r\n      ]\r\n    }\r\n  ]\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"file\"\r\n\r\n<string>\r\n-----011000010111000001101001--"

response = http.request(request)
puts response.read_body

{
  "files": [
    {
      "URL": "<string>",
      "contentType": "application/json",
      "metadata": {
        "fileSizeBytes": 123,
        "pageCount": 123
      }
    }
  ]
}

{
  "type": "https://developers.gonitro.com/docs/build-nitro/errors#400-bad-request",
  "title": "Bad Request",
  "status": 400,
  "detail": "Request validation failed",
  "instance": "/platform/transformations"
}

{
  "type": "https://developers.gonitro.com/docs/build-nitro/errors#401-unauthorized",
  "title": "Unauthorized",
  "status": 401,
  "detail": "Missing or invalid Authorization header",
  "instance": "/platform/transformations"
}

{
  "type": "https://developers.gonitro.com/docs/build-nitro/errors#404-not-found",
  "title": "Not Found",
  "status": 404,
  "detail": "Resource not found",
  "instance": "/platform/transformations"
}

{
  "type": "https://developers.gonitro.com/docs/build-nitro/errors#413-content-too-large",
  "title": "Content too large",
  "status": 413,
  "detail": "Uploaded document exceeds the file size limit",
  "instance": "/platform/transformations"
}

{
  "type": "https://developers.gonitro.com/docs/build-nitro/errors#422-unprocessable-entity",
  "title": "Unprocessable Entity",
  "status": 422,
  "detail": "The request was well-formed but could not be processed",
  "instance": "/platform/transformations"
}

{
  "type": "https://developers.gonitro.com/docs/build-nitro/errors#500-internal-server-error",
  "title": "Internal Server Error",
  "status": 500,
  "detail": "An unexpected error occurred",
  "instance": "/platform/transformations"
}

POST

transformations

Redact PDF pages

curl --request POST \
  --url https://api.gonitro.dev/transformations \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: multipart/form-data' \
  --form method=redact \
  --form 'params={
  "redactions": [
    {
      "pageIndex": 0,
      "boundingBox": [
        100,
        100,
        200,
        120
      ]
    },
    {
      "pageIndex": 1,
      "boundingBox": [
        50,
        50,
        150,
        70
      ]
    }
  ]
}' \
  --form 'file=<string>'

import requests

url = "https://api.gonitro.dev/transformations"

payload = "-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"method\"\r\n\r\nredact\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"params\"\r\n\r\n{\r\n  \"redactions\": [\r\n    {\r\n      \"pageIndex\": 0,\r\n      \"boundingBox\": [\r\n        100,\r\n        100,\r\n        200,\r\n        120\r\n      ]\r\n    },\r\n    {\r\n      \"pageIndex\": 1,\r\n      \"boundingBox\": [\r\n        50,\r\n        50,\r\n        150,\r\n        70\r\n      ]\r\n    }\r\n  ]\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"file\"\r\n\r\n<string>\r\n-----011000010111000001101001--"
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "multipart/form-data"
}

response = requests.post(url, data=payload, headers=headers)

print(response.text)

const form = new FormData();
form.append('method', 'redact');
form.append('params', '{
  "redactions": [
    {
      "pageIndex": 0,
      "boundingBox": [
        100,
        100,
        200,
        120
      ]
    },
    {
      "pageIndex": 1,
      "boundingBox": [
        50,
        50,
        150,
        70
      ]
    }
  ]
}');
form.append('file', '<string>');

const options = {method: 'POST', headers: {Authorization: 'Bearer <token>'}};

options.body = form;

fetch('https://api.gonitro.dev/transformations', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.gonitro.dev/transformations",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => "-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"method\"\r\n\r\nredact\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"params\"\r\n\r\n{\r\n  \"redactions\": [\r\n    {\r\n      \"pageIndex\": 0,\r\n      \"boundingBox\": [\r\n        100,\r\n        100,\r\n        200,\r\n        120\r\n      ]\r\n    },\r\n    {\r\n      \"pageIndex\": 1,\r\n      \"boundingBox\": [\r\n        50,\r\n        50,\r\n        150,\r\n        70\r\n      ]\r\n    }\r\n  ]\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"file\"\r\n\r\n<string>\r\n-----011000010111000001101001--",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: multipart/form-data"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.gonitro.dev/transformations"

	payload := strings.NewReader("-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"method\"\r\n\r\nredact\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"params\"\r\n\r\n{\r\n  \"redactions\": [\r\n    {\r\n      \"pageIndex\": 0,\r\n      \"boundingBox\": [\r\n        100,\r\n        100,\r\n        200,\r\n        120\r\n      ]\r\n    },\r\n    {\r\n      \"pageIndex\": 1,\r\n      \"boundingBox\": [\r\n        50,\r\n        50,\r\n        150,\r\n        70\r\n      ]\r\n    }\r\n  ]\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"file\"\r\n\r\n<string>\r\n-----011000010111000001101001--")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.gonitro.dev/transformations")
  .header("Authorization", "Bearer <token>")
  .body("-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"method\"\r\n\r\nredact\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"params\"\r\n\r\n{\r\n  \"redactions\": [\r\n    {\r\n      \"pageIndex\": 0,\r\n      \"boundingBox\": [\r\n        100,\r\n        100,\r\n        200,\r\n        120\r\n      ]\r\n    },\r\n    {\r\n      \"pageIndex\": 1,\r\n      \"boundingBox\": [\r\n        50,\r\n        50,\r\n        150,\r\n        70\r\n      ]\r\n    }\r\n  ]\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"file\"\r\n\r\n<string>\r\n-----011000010111000001101001--")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.gonitro.dev/transformations")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request.body = "-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"method\"\r\n\r\nredact\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"params\"\r\n\r\n{\r\n  \"redactions\": [\r\n    {\r\n      \"pageIndex\": 0,\r\n      \"boundingBox\": [\r\n        100,\r\n        100,\r\n        200,\r\n        120\r\n      ]\r\n    },\r\n    {\r\n      \"pageIndex\": 1,\r\n      \"boundingBox\": [\r\n        50,\r\n        50,\r\n        150,\r\n        70\r\n      ]\r\n    }\r\n  ]\r\n}\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"file\"\r\n\r\n<string>\r\n-----011000010111000001101001--"

response = http.request(request)
puts response.read_body

{
  "files": [
    {
      "URL": "<string>",
      "contentType": "application/json",
      "metadata": {
        "fileSizeBytes": 123,
        "pageCount": 123
      }
    }
  ]
}

{
  "type": "https://developers.gonitro.com/docs/build-nitro/errors#400-bad-request",
  "title": "Bad Request",
  "status": 400,
  "detail": "Request validation failed",
  "instance": "/platform/transformations"
}

{
  "type": "https://developers.gonitro.com/docs/build-nitro/errors#401-unauthorized",
  "title": "Unauthorized",
  "status": 401,
  "detail": "Missing or invalid Authorization header",
  "instance": "/platform/transformations"
}

{
  "type": "https://developers.gonitro.com/docs/build-nitro/errors#404-not-found",
  "title": "Not Found",
  "status": 404,
  "detail": "Resource not found",
  "instance": "/platform/transformations"
}

{
  "type": "https://developers.gonitro.com/docs/build-nitro/errors#413-content-too-large",
  "title": "Content too large",
  "status": 413,
  "detail": "Uploaded document exceeds the file size limit",
  "instance": "/platform/transformations"
}

{
  "type": "https://developers.gonitro.com/docs/build-nitro/errors#422-unprocessable-entity",
  "title": "Unprocessable Entity",
  "status": 422,
  "detail": "The request was well-formed but could not be processed",
  "instance": "/platform/transformations"
}

{
  "type": "https://developers.gonitro.com/docs/build-nitro/errors#500-internal-server-error",
  "title": "Internal Server Error",
  "status": 500,
  "detail": "An unexpected error occurred",
  "instance": "/platform/transformations"
}

The Redact method of the Transformations endpoint lets you add redaction boxes to remove or hide sensitive content in a PDF. You provide an array of redaction entries, where each entry defines a bounding box to apply on a specific page. Each redaction box includes:

pageIndex: The zero-based index of the page where the redaction should be applied.
boundingBox: The position and size of the redaction area. See the bounding box guide for details on how coordinates work in the Nitro API.
label (optional): A label rendered onto the redaction box in the output — for example, the reason for the redaction. The label is drawn left-aligned in white 12pt Helvetica and is trimmed to fit the box width (no wrapping or overflow). Boxes without a label render as plain black boxes.

The Text Bounding Box method of the Extractions endpoint returns bounding box positions that can be used as input for the Redact method’s redactions parameter.

Result example:

Original PDF

Redacted PDF

Providing an out-of-range page index will result in an error response

Output File Format

The endpoint can return output either as JSON or as a binary file. The format depends on the Accept header (details below), which defaults to application/json.

Processing

When requesting JSON, you can run the operation synchronously or asynchronously. This is determined by the Prefer header (details below).

In sync mode, the response includes a URL pointing to the processed file.
In async mode, the request creates a Job, and the response contains the Job ID and status so you can track progress.

Binary (octet-stream) responses are only available for synchronous operations.

Custom File Delivery

The endpoint supports custom file-delivery destinations through the optional delivery parameter. You can provide an upload target, such as your own PUT endpoint or a pre-signed S3 URL, and Nitro will upload the resulting file there. This works for both synchronous and asynchronous processing.

Sync delivery
In synchronous calls, the delivery parameter lets you direct Nitro to upload the output file to a custom URL endpoint or a pre-signed URL (e.g S3), by providing an upload url in the uploadResultTo or uploadResultsTo properties.
Custom endpoint

If implementing the upload endpoint by yourself, make sure your code or middleware configuration accepts requests without content-type headers.

S3 delivery
If you are using S3 to manage delivery uploads, follow this AWS documentation to generate a pre-signed PUT URL.
If using the AWS provided Python script, omit the Content-Type in Params to get the pre-signed url. For example:
url = generate_presigned_url( s3_client, "put_object", { "Bucket": args.bucket, "Key": args.key, # Content-Type: "application/octet-stream" => Omit! }, 1000)
Async delivery
In asynchronous flows, you can also provide a custom URL or pre-signed S3 object via uploadResultTo or uploadResultsTo, to upload your file(s) once the Job is done processing.
Callback
For asynchronous processing, you can also include a callback URL within the delivery parameter. This callback is a POST endpoint that Nitro will call once the Job is created and running, providing details about the file-processing job. Example of Nitro’s callback request body:
{ "jobID": "babe2aa7-9b5d-4eb2-a679-5fc12cf0a490", "location": "https://api.gonitro.dev/jobs/babe2aa7-9b5d-4eb2-a679-5fc12cf0a490" }

Response behavior Matrix

This matrix shows the expected response behavior based on content type, sync/async mode, and custom file-delivery settings.

	JSON (`application/json`)	Binary (`application/octet-stream`)
Synchronous	Returns a JSON object with a file(s) URL(s).	Returns the processed file directly as binary.
Asynchronous (`respond-async`)	Returns a JSON object with a Job ID and status.	Async preference ignored, returns sync binary.
Synchronous delivery	File delivered to custom endpoint / Bucket, returns success confirmation.	N/A
Asynchronous delivery	Returns a JSON object with a Job ID and status. The file(s) will be uploaded to the provided PUT endpoint / S3 Bucket at the end of process. If `callback` url is provided, Nitro will notify the endpoint with a JOB ID and location.	N/A

Limits

The Platform API has the following limits:

File size: Maximum of 100 MB per request for direct uploads and synchronous requests; asynchronous requests with remote-file (URL) input allow up to 300 MB. This applies to single-file and multi-file requests (multi-file requests are limited by their combined size). Some operations allow more — Merge accepts up to 1.5 GB for asynchronous remote-file input.
Page count: Maximum of 500 pages per individual document, or 2500 pages for asynchronous requests with remote-file (URL) input. This applies to single-file and multi-file requests. Multiple documents may exceed the page limit in total.
Retention time: Inputs and outputs are deleted approximately 15 minutes after the operation completes.

Request

Authorizations

Authorization

string

header

required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Headers

enum<string>

default:*/*

Controls response format and behavior. See endpoint description above for detailed response combinations.

application/json: Returns JSON response with operation result
application/octet-stream: Returns binary file content
*/*: Defaults to JSON response

Available options:

application/json,

application/octet-stream,

*/*

Prefer

enum<string>

Controls synchronous vs asynchronous operation. See endpoint description above for behavior details.

respond-async: Makes request asynchronous, returns job status for polling
No value: Synchronous response

Available options:

respond-async

Body

multipart/form-data

method

enum<string>

default:redact

required

The Transformations' endpoint method: redact

Available options:

redact

params

Redact · object

required

Show child attributes

file

required

The file to process. It can be provided as a binary upload or as a JSON remote file reference.

delivery

object

This endpoint lets you supply your own URLs to receive the multiple-file outputs. The URLs may point to a custom API endpoint or a pre-signed S3 URL.

The HTTP method defaults to PUT, but you can change it based on your implementation needs via the verb parameter. You can also provide custom headers, such as authentication headers or any others required by your endpoint.

Show child attributes

Response

Returns either JSON or binary output depending on the Accept header (defaults to JSON). JSON responses include a file URL for synchronous tasks or a job status for asynchronous tasks.

Sync - Multiple Files
Async - Job

files

object[]

Show child attributes

Start Here

PDF Services

Sign API

Reference

Original PDF

Redacted PDF

Output File Format

Processing

Custom File Delivery

Sync delivery

Custom endpoint

S3 delivery

Async delivery

Callback

Response behavior Matrix

Limits

Request

Authorizations

Headers

Body

Response