---
title: "Sign the file of one asset linked to an answer request"
method: GET
path: "/api/questionnaires/requests/{requestId}/assets/{assetId}/file"
tags: ["Questionnaire Responses"]
---

# Sign the file of one asset linked to an answer request

`GET /api/questionnaires/requests/{requestId}/assets/{assetId}/file`

A time-limited download URL for the file behind one asset of the company a questionnaire request is about. Readable by all three parties to the request; anyone else gets 404 `request_not_found`. Takes an **asset id, never a file url**: the object key is resolved server-side from an asset that belongs to the request's subject company, so a valid `requestId` cannot be used to sign a file of some other company's asset. That is the whole difference from `GET /v3/files/:fileUrl`, which signs any private-bucket key it is handed. An asset the subject company does not hold answers 404 `asset_not_found`; a real asset carrying no file answers 404 `asset_has_no_file`, which is a different thing and says so. `part` picks between an audit's two files — its report (the default) and its corrective action plan — since the answer form previews both; the other buckets ignore it.

## Path parameters

- `requestId` string, required
- `assetId` string, required

## Query parameters

- `bucket` 'document' | 'certificate' | 'audit', required
- `part` 'report' | 'correctiveActionPlan'

## Response `200`

Default Response

- object
  - `metadata` object, required
    - `success` boolean, required — True when the request succeeded.
  - `data` object, required
    - `signedUrl` string, required

## Other responses

- `400` — Default Response
- `401` — Default Response
- `403` — Default Response
- `404` — Default Response

## Changes

> 21 revisions in range; 1 not diffed.

- **2026-08-24** `d1450ba9a75a` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/retraced/apis/api-reference/changes/api/questionnaires/requests/:requestId/assets/:assetId/file/get.md)

---

[API](https://skmtc.dev/retraced/apis/api-reference.md) · [All operations](https://skmtc.dev/retraced/apis/api-reference/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/retraced/api-reference/revisions/1df37791a1bb/schema)