---
title: "List a report's assets"
method: GET
path: "/reports/{id}/assets"
tags: ["Assets"]
---

# List a report's assets

`GET /reports/{id}/assets`

## Request

- Base URL: `https://commareports.com/api/v1`
- URL: `https://commareports.com/api/v1/reports/{id}/assets`
- Auth: HTTP bearer

Each asset has a stable public URL suitable for referencing from the report HTML. Scope: `reports:read`.

## Response `200`

Assets.

- object
  - `assets` Asset[], required
    - `id` string, uuid, required
    - `relative_path` string, required
    - `mime` string, required
    - `size_bytes` integer, required
    - `created_at` string, date-time, required
    - `url` string, uri, required: Stable public URL.

## Other responses

- `401`: Missing, invalid, revoked, or expired token.
- `403`: Token missing the required scope, or no access to the resource.
- `404`: Resource not found (also returned instead of 403 where existence must not leak).
- `429`: Rate limit exceeded. Rate limit: per-token sliding window (plan-aware — Free 60 req/min, Pro 600, Team/Enterprise 6000 by default); 429 responses carry a Retry-After header.
- `500`: Unexpected server error.

---

[API](https://skmtc.dev/commareports/apis/comma-api.md) · [All operations](https://skmtc.dev/commareports/apis/comma-api/llms.txt) · [OpenAPI document](https://skmtc.dev/commareports/apis/comma-api/revisions/cd5263522ade?raw)