---
title: "Get File"
method: GET
path: "/drive/files/{file_id}"
tags: ["drive"]
---

# Get File

`GET /drive/files/{file_id}`

## Request

- Base URL: `https://api.moda.app/v1`
- URL: `https://api.moda.app/v1/drive/files/{file_id}`
- Auth: HTTP bearer

File metadata: name, folder, visibility, MIME type, size, creator.

The app's own access rule (``FileService.get_file`` →
``FileAccessChecker.can_view``): another user's private file is an
indistinguishable 404, cross-team refs 404 on the bare team column first.
Unlike the listing, a library-hidden file (``show_in_library: false``,
e.g. canvas-embedded assets) IS readable by id — parity with the app's
``GET /files/{id}``.

## Path parameters

- `file_id` string, required: Prefixed ``file_`` wire ID (Crockford base32 body) — the canonical, recommended form. For back-compat, **a bare UUID string is also accepted** in both path parameters and JSON request bodies (older integrations that stored raw UUIDs keep working), as is **the prefix over a UUID body** (``file_00000000-0000-4000-8000-000000000000``). All three are permanent, supported inputs; only the canonical form is ever emitted.

## Headers

- `Moda-Version` '2026-04-12' | '2026-05-01'

## Response `200`

Successful Response

- object

## Other responses

- `401`: Authentication required.
- `402`: Insufficient credits for a metered operation.
- `403`: Permission denied for this scope.
- `404`: Resource not found.
- `409`: Conflict (idempotency / resource state).
- `422`: Request validation failed.
- `429`: Rate limit exceeded.
- `500`: Internal error.

## Changes

- **2026-11-03** `9ac6a3abc0f8`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/moda/apis/moda-public-api/changes/drive/files/:file_id/get.md)

---

[API](https://skmtc.dev/moda/apis/moda-public-api.md) - [All operations](https://skmtc.dev/moda/apis/moda-public-api/llms.txt) - [OpenAPI document](https://skmtc.dev/moda/apis/moda-public-api/revisions/9ac6a3abc0f8?raw)