Download attachment content

GET 
/openapi/v1/credentials/:credentialId/attachments/:attachmentId/content

Returns the raw file bytes with the original Content-Type and a Content-Disposition set to the original filename. The URL is a short-lived signed link scoped to the requesting caller — obtain a fresh contentUrl (with exp and sig query parameters) from the attachment metadata endpoints. Per-credential authorization is still enforced independently of the signature.

Request

Responses

200

OK

401

Authentication required

403

Caller is not authorised

429

Rate limit exceeded — see Retry-After header

500

Internal server error