---
title: "List a row’s attachments"
method: GET
path: "/v1/tables/{tableId}/rows/{rowId}/attachments"
tags: ["Tables"]
---

# List a row’s attachments

`GET /v1/tables/{tableId}/rows/{rowId}/attachments`

## Request

- Base URL: `https://api.banksync.io`
- URL: `https://api.banksync.io/v1/tables/{tableId}/rows/{rowId}/attachments`
- Auth: one of:
  - API key in header `X-API-Key`
  - HTTP bearer

Metadata for every file attached to one row. Download each with `GET /v1/tables/{tableId}/attachments/{assetId}`.

## Path parameters

- `tableId` string, required: Table ID
- `rowId` string, required: Row ID

## Response `200`

Attachments on the row

- object
  - `success` true, required
  - `items` object[], required
    - `id` string, required
    - `workspaceId` string, required
    - `tableId` string, required
    - `rowId` string
    - `fieldId` string, nullable, required
    - `messageId` string
    - `position` integer
    - `filename` string, required
    - `contentType` string, required
    - `sizeBytes` integer, required
    - `createdBy` union, required
      - object
        - `kind` 'user', required
        - `userId` string, required
      - object
        - `kind` 'sync', required
        - `feedId` string, required
        - `jobId` string
        - `cause` object
          - `automationId` string, required
          - `runId` string, required
          - `depth` integer, required
          - `untrustedSender` true
      - object
        - `kind` 'extractor', required
        - `feedId` string, required
        - `jobId` string
        - `untrustedSender` true
      - object
        - `kind` 'import', required
        - `importId` string, required
        - `userId` string, required
      - object
        - `kind` 'api', required
        - `clientId` string, required
      - object
        - `kind` 'system', required
        - `reason` string, required
      - object
        - `kind` 'automation', required
        - `automationId` string, required
        - `revision` string, required
        - `grantId` string, required
        - `runId` string, required
        - `node` string, required
        - `startedBy` ActorRef, required (recursive)
        - `depth` integer, required
        - `untrustedSender` true
    - `createdAt` string, required

## Other responses

- `400`: Validation failed, or a read-only field was written — `code` names the refusal and `details[]` the offending field or cell
- `401`: Unauthorized
- `403`: Forbidden — missing scope, insufficient role, or plan limit reached
- `404`: Not found

---

[API](https://skmtc.dev/banksync/apis/banksync-api.md) · [All operations](https://skmtc.dev/banksync/apis/banksync-api/llms.txt) · [OpenAPI document](https://skmtc.dev/banksync/apis/banksync-api/revisions/94465f5ee922?raw)