Stream an attachment (share link or bearer)
Streams the file for a caller holding a live share token for the attachment's page (share, used by share pages) or a bearer that can see the page. Anything else is 404, so a URL on its own (an id, or a retired exp+sig signed URL) opens nothing. Never redirects to a storage URL. Raster images (png, jpeg, gif, webp, avif) are served inline; anything else as application/octet-stream to download. Every response is Cache-Control private, no-store, Referrer-Policy no-referrer, X-Content-Type-Options nosniff. Streams are bounded: a deadline sized to the file, and a cap on concurrent downloads per caller and overall (429 past it).
View as MarkdownPath Parameters
uuidQuery Parameters
Response Body
application/octet-stream
application/json
application/json
curl -X GET "https://example.com/v1/attachments/497f6eca-6276-4993-bfeb-53cbbbba6f08"Upload a file (multipart, "file" field, ≤15MB)
Previous Page
Stream an attachment's bytes (members)
For an attachment on a page the caller can see, streams the file itself, with the same type and header rules as getAttachment. The editor shows images from it through blob: URLs, and exports bundle images from it.