Download an attachment

Download one attachment.

GEThttps://app.usenotix.dev/api/v1/inbound/messages/{id}/attachments/{attachmentId}

Full access and read only keys can call this. Sending access keys cannot. Key permissions lists the extra rules some calls have.

Download one attachment. It always comes as a file download: HTML, SVG, scripts and any other type a browser could run are sent as application/octet-stream, with X-Content-Type-Options: nosniff and a sandbox Content-Security-Policy. The file was sent by someone outside your team, so open it with care. Scoped like the message itself; anything the key may not read answers 404.

Path parameters

idstringrequired
attachmentIdstringrequired

Headers

Authorizationstringrequired

Bearer followed by your API key.

Errors

403

`FORBIDDEN`: the key's creator has left the team.

404

No such message or attachment that the key may read.

Every error has the same shape. See all error codes.

curl -X GET "https://app.usenotix.dev/api/v1/inbound/messages/<id>/attachments/<attachmentId>" \
  -H "Authorization: Bearer $NOTIX_API_KEY"
Open in ClaudeOpen in ChatGPT