Download attachment bytes

GET 
/attachments/:id/download

Streams the file bytes for the attachment back to the caller. Requires scope finance.attachments — the same Bearer JWT as the listing endpoint. Content-Type reflects the stored MIME; Content-Disposition is inline for PDF / images and attachment for other types. No caching — Cache-Control: private, no-store.

Request

Responses

200

File bytes (binary stream). See Content-Type and Content-Disposition headers.

401

Missing / invalid / expired / revoked token.

403

Token authenticated but lacks the finance.attachments scope, or sub does not match any workspace.

404

Attachment not found within the tenant.

429

Rate limit exceeded for this token. Reads and writes have separate budgets, both on a 1-hour sliding window. The response carries X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset and Retry-After — wait out Retry-After rather than retrying immediately.

500

Unhandled server error.