---
title: "Download a support attachment"
method: GET
path: "/v1/support/attachments/{attachmentId}/content"
tags: ["Support"]
---

# Download a support attachment

`GET /v1/support/attachments/{attachmentId}/content`

## Request

- Base URL: `https://api.inth.com`
- URL: `https://api.inth.com/v1/support/attachments/{attachmentId}/content`
- Auth: HTTP bearer

Stream attachment bytes after the same customer ownership or organization-sharing checks as conversation reads. Always uses customer permissions, including for internal staff. Requires support.read and a user token. No operator access is granted.

## Path parameters

- `attachmentId` string, required

## Response `200`

Attachment bytes. Content-Type matches the stored media type. Includes private no-store, Content-Disposition, Content-Length, ETag and nosniff headers.

## Other responses

- `401`: Authentication is missing, invalid, or expired.
- `403`: The credential is valid but may not perform the operation. `INSUFFICIENT_SCOPE`: the credential was never granted the capability the operation needs. `details.requiredScope` names it, and the `WWW-Authenticate` header carries `Bearer error="insufficient_scope"`. An OAuth client fixes this by requesting the scope; an organization API key cannot gain it. `FORBIDDEN`: the capability is present but the membership behind the credential lacks the role, or the resource belongs to another organization.
- `404`: The requested resource was not found.

## Changes

- **2026-10-31** `a3f4100e14c9`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/inth/apis/inth-api/changes/v1/support/attachments/:attachmentId/content/get.md)

---

[API](https://skmtc.dev/inth/apis/inth-api.md) - [All operations](https://skmtc.dev/inth/apis/inth-api/llms.txt) - [OpenAPI document](https://skmtc.dev/inth/apis/inth-api/revisions/5a1be8d43402?raw)