Download attachment bytes

GET 
/attachments/:id/download

Streams the file bytes for the attachment back to the caller. Same Bearer JWT (scope finance.attachments) as the listing endpoint. Content-Type reflects the stored MIME; Content-Disposition is inline for PDF / images and attachment for other types. No caching — Cache-Control: private, no-store.

Request

Responses

200

File bytes (binary stream). See Content-Type and Content-Disposition headers.

401

Missing / invalid / expired / revoked token.

403

Token authenticated but lacks the finance.attachments scope, or sub does not match any workspace.

404

Attachment not found within the tenant.

500

Unhandled server error.