---
title: "List provider attachments"
method: GET
path: "/api/organization-providers/v3/{organization_provider_id}/attachments"
tags: ["v3"]
---

# List provider attachments

`GET /api/organization-providers/v3/{organization_provider_id}/attachments`

## Request

- Base URL: `https://pre-api.joincandidhealth.com`
- URL: `https://pre-api.joincandidhealth.com/api/organization-providers/v3/{organization_provider_id}/attachments`
- Auth: HTTP bearer

## Path parameters

- `organization_provider_id` string, uuid, required

## Response `200`

Response with status 200

- OrganizationProvidersV3ProviderAttachment[]
  - `provider_attachment_id` string, uuid, required
  - `organization_provider_id` string, uuid, required
  - `file_name` string, required
  - `file_type` 'W9' | 'PECOS_RECORD' | 'BANK_LETTER_OR_VOIDED_CHECK', required
  - `description` string, required
  - `content_type` string, required
  - `created_at` string, date-time, required
  - `created_by` UsersV2UserV2, required
    - `user_id` string, uuid, required
    - `idp_metadata` UsersV2IdpUserMetadata[], required
      - union
        - object
          - `type` 'auth_zero_metadata', required: Discriminator value: auth_zero_metadata
          - `auth0_id` string, required
        - object
          - `type` 'google_apps_metadata', required: Discriminator value: google_apps_metadata
          - `google_apps_id` string, required
        - object
          - `type` 'other_idp_metadata', required: Discriminator value: other_idp_metadata
          - `idp_external_id` string, required
    - `primary_organization_id` string, uuid
    - `user_metadata` union, required
      - object
        - `type` 'machine_user_metadata', required: Discriminator value: machine_user_metadata
        - `name` string, required
      - object
        - `type` 'human_user_metadata', required: Discriminator value: human_user_metadata
        - `first_name` string, required
        - `last_name` string, required
        - `email` string, required

## Changes

- **2026-09-17** `24b2d80d577a`: 1 breaking, 1 warning, 10 info
  - the `items/` response's property type changed from no type to `object` for status `200`
  - deleted the `header` request parameter `Authorization`
  - the endpoint scheme security `OAuthScheme` was added to the API
  - for the `path` request parameter `organization_provider_id`, the type was generalized from no type to `string`, and format from no format to `uuid`
  - …8 more
- **2026-09-12** `3a81ee81d4ed`: 1 info
  - api operation id `list_attachments` removed and replaced with `v3_list_attachments`
- **2026-08-01** `2acbb818b302`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/joincandidhealth/apis/api-reference/changes/api/organization-providers/v3/:organization_provider_id/attachments/get.md)

---

[API](https://skmtc.dev/joincandidhealth/apis/api-reference.md) - [All operations](https://skmtc.dev/joincandidhealth/apis/api-reference/llms.txt) - [OpenAPI document](https://skmtc.dev/joincandidhealth/apis/api-reference/revisions/d8b0a61873e2?raw)