---
title: "List Session Attachments"
method: GET
path: "/sessions/{sessionId}/attachments"
---

# List Session Attachments

`GET /sessions/{sessionId}/attachments`

Lists the uploaded attachments for a session. Only committed attachments are returned.

## Path parameters

- `sessionId` string, required

## Query parameters

- `limit` integer
- `cursor` string

## Response `200`

The session's attachments.

- object
  - `data` Attachment[], required
    - `id` string, uuid, required — The ID of the Attachment.
    - `sessionId` string, required — The session ID the attachment belongs to. Matches the `session.id` emitted on OTel spans, which is how attachments are joined to traces and records.
    - `filePath` string, required — The logical file path of the attachment (e.g. the path the agent wrote on disk). Together with the session ID it identifies the attachment: re-uploading the same path in the same session updates the existing attachment in place.
    - `filename` string, nullable, required — Display filename, if provided.
    - `contentType` string, nullable, required — MIME type of the last committed content. Null until the first commit.
    - `sizeBytes` integer, nullable, required — Size in bytes of the last committed content. Null until the first commit.
    - `sha256` string, nullable, required — SHA-256 of the last committed content. Null until the first commit.
    - `status` 'pending' | 'uploaded', required — `uploaded` once a commit has succeeded; `pending` while an initiated upload has not been committed yet.
    - `uploadedAt` string, nullable, required — ISO 8601 timestamp of the last successful commit. Null until the first commit.
    - `metadata` object, nullable, required — Arbitrary caller-supplied metadata.
  - `nextCursor` string, nullable, required
  - `hasMore` boolean, required
  - `total` integer

## Other responses

- `401` — Error indicating that the request is not authenticated.
- `500` — An internal service error indicating an issue with the Scorecard service.

## Changes

- **2026-08-10** `121aaa257802` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/scorecard-ai/apis/scorecard-api/changes/sessions/:sessionId/attachments/get.md)

---

[API](https://skmtc.dev/scorecard-ai/apis/scorecard-api.md) · [All operations](https://skmtc.dev/scorecard-ai/apis/scorecard-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/scorecard-ai/scorecard-api/revisions/121aaa257802/schema)