Download attachment
GET/v1/attachment/:attachment_token
Download an attachment file from S3 storage by its attachment_token.
Access control: authenticated API user. The user is already customer-scoped — there is no cross-customer reachability because each customer has its own database.
Disposition:
- Default:
Content-Disposition: attachment(downloads with original filename). - Pass
?inline=trueto render in-browser instead.
Token source: the attachment_token is returned in the invoice
detail response at invoice.attachments[].attachment_token.
Request
Responses
- 200
- 400
- 401
- 404
- 500
File retrieved
Response Headers
Content-Type
MIME type of the file
Content-Disposition
attachment | inline
Invalid or missing attachment_token
Unauthorized
Attachment not found
S3 or database error