---
title: "Not open yet: one received attachment."
method: GET
path: "/emails/receiving/{id}/attachments/{aid}"
tags: ["emails"]
---

# Not open yet: one received attachment.

`GET /emails/receiving/{id}/attachments/{aid}`

## Request

- Base URL: `https://api.agentisend.com`
- URL: `https://api.agentisend.com/emails/receiving/{id}/attachments/{aid}`
- Auth: HTTP bearer

The bytes as an inert download (always octet-stream, never the sender’s declared type), or its JSON view with a download link when the request asks for JSON. Send Accept: application/json, or Content-Type: application/json as the Resend SDKs do, for the JSON view. Any other request gets the bytes. The id is the attachment uuid; the position (0, 1, …) is accepted too.

## Path parameters

- `id` string, uuid, required
- `aid` string, required

## Response `200`

Success

- GetEmailsReceivingByIdAttachmentsByAidReply
  - `id` string, uuid, required
  - `filename` string, required
  - `content_type` string, required
  - `size_bytes` integer, required
  - `size` integer, required
  - `content_id` string, nullable, required
  - `content_disposition` 'inline' | 'attachment', required
  - `download_url` string, uri, required
  - `expires_at` string, date-time, required
  - `object` 'attachment', required

## Other responses

- `400`: The request is malformed or a field failed validation. Codes: validation_error, invalid_idempotency_key, invalid_cursor, plan_not_purchasable, stripe_signature_invalid, support_upload_rejected, sign_in_check_required.
- `401`: No usable credential was sent. Codes: missing_api_key, session_required, mfa_required.
- `403`: The credential may not do this, or the account or key is stopped. Codes: sending_domain_blocked, young_domain_held, domain_sending_disabled, domain_not_verified, onboarding_recipient_not_a_member, onboarding_sender_unavailable, account_suspended, account_sandboxed, human_action_required, csrf_origin_rejected, charge_not_this_account, invalid_api_key, restricted_api_key, insufficient_role, invite_email_mismatch, domain_scope_violation, dedicated_ip_assigned_by_us, approval_required, staff_review_required, trust_paused, kill_switch_active.
- `404`: Nothing with this id exists on the account. Codes: billing_customer_missing, not_found, session_expired, support_ticket_not_found.
- `429`: A rate, quota or ramp ceiling was reached. Codes: onboarding_daily_cap_reached, trust_throttled, invite_limit_reached, rate_ceiling_exceeded, daily_quota_exceeded, monthly_quota_exceeded, rate_limit_exceeded, support_rate_limited.
- `500`: Something failed on our side. Codes: internal_server_error.

---

[API](https://skmtc.dev/agentisend/apis/agentisend-api.md) · [All operations](https://skmtc.dev/agentisend/apis/agentisend-api/llms.txt) · [OpenAPI document](https://skmtc.dev/agentisend/apis/agentisend-api/revisions/3066dda62a56?raw)