---
title: "Sign the proof file of one certificate"
method: GET
path: "/api/claims/{id}/file"
tags: ["Claims"]
---

# Sign the proof file of one certificate

`GET /api/claims/{id}/file`

A time-limited, read-only download URL for the proof file of one certificate the caller's company can see: the certificate belongs to a company in the caller's network, and a DRAFT is visible only to its creator. Takes a **claim id, never a file url**: the object key is resolved server-side from the claim, so the caller cannot name an arbitrary file. A claim outside the caller's network answers 404 `claim_not_found` whether or not it exists; a visible claim that carries no file answers 404 `claim_has_no_file`. The list and detail endpoints already embed the same signed URL in `fileUrl`; this route is for a caller that only holds the id. Replaces `GET /api-service/v3/files/:fileUrl`, which signed any private-bucket key it was handed and was removed in DELTA-2422.

## Path parameters

- `id` string, required

## Response `200`

Default Response

- object
  - `metadata` object, required
    - `success` boolean, required — True when the request succeeded.
  - `data` object, required
    - `signedUrl` string, required

## Other responses

- `401` — Default Response
- `403` — Default Response
- `404` — Default Response

## Changes

> 46 revisions in range; 1 not diffed.

- **2026-09-09** `3267506bcf8b` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/retraced/apis/api-reference/changes/api/claims/:id/file/get.md)

---

[API](https://skmtc.dev/retraced/apis/api-reference.md) · [All operations](https://skmtc.dev/retraced/apis/api-reference/llms.txt) · [OpenAPI document](https://skmtc.dev/retraced/apis/api-reference/revisions/63e640ecf381?raw)