---
title: "Retrieve multiple attachments by their IDs"
method: POST
path: "/api/workspaces/{workspaceId}/attachments/list"
tags: ["CRUD", "ItemAttachments"]
---

# Retrieve multiple attachments by their IDs

`POST /api/workspaces/{workspaceId}/attachments/list`

## Request

- Base URL: `https://app.airfocus.com`
- URL: `https://app.airfocus.com/api/workspaces/{workspaceId}/attachments/list`
- Auth: HTTP bearer

Returns a list of attachments resolved for the provided IDs.<br/>
Guarantees that the array-size and order of the returned attachments matches the order of requested IDs.<br/>
Does not fail if any of the requested attachments is not found or not accessible - instead it returns null as an array-element of the corresponding attachment which could not be accessed.<br/>Requirements:<br/>- auth-client scopes: "workspace:read"<br/>- user permission: "read" or higher

## Path parameters

- `workspaceId` string, uuid, required

## Query parameters

- `actAsAdmin` boolean

## Request body

- string[]

## Response `200`

- ItemAttachmentWithEmbed[]
  - `_embedded` object, required
  - `contentType` string, required: Type of updated content.
  - `createdAt` string, date-time, required: When this attachment link has been created.
  - `id` string, uuid, required: ID of an item-attachment link.
  - `itemId` string, uuid, required: ID of the item to which the attachment is linked.
  - `lastUpdatedAt` string, date-time, required: When this attachment link has been updated for the last time.
  - `name` string, required: Name of the attachment, e.g. its file name (to be displayed in UI).
  - `uri` string, required: URI of the attachment contents. It can be any URI, but conventionally it's a relative URI like 'attachment:1ecb9ecd-8a97-403a-a74a-741eb4b8fb69' with UUID of a file uploaded to airfocus file-storage. Such URI is then resolved by clients into a full HTTPS URL.

## Other responses

- `400`: If payload is invalid.
- `401`: If missing authentication token.
- `403`: If user does not have the required permission, or authenticated client does not have the required access scopes.
- `default`: If any other error happens.

---

[API](https://skmtc.dev/airfocus/apis/airfocus-api.md) · [All operations](https://skmtc.dev/airfocus/apis/airfocus-api/llms.txt) · [OpenAPI document](https://skmtc.dev/airfocus/apis/airfocus-api/revisions/fc9ccaa2ec6d?raw)