---
title: "Stream one complete original file"
method: GET
path: "/api/file-transfers/download"
---

# Stream one complete original file

`GET /api/file-transfers/download`

## Request

- Base URL: `https://www.toma.com`
- URL: `https://www.toma.com/api/file-transfers/download`
- Auth: none required

Use the private URL returned by the download operation. Toma checks the action-bound token and current access, then verifies bytes and rechecks access during streaming. Never redirects to an irrevocable S3 download URL. Content-Disposition carries the original logical filename; no-store and nosniff are enforced.

## Query parameters

- `token` string, required

## Response `200`

Complete binary attachment.

## Other responses

- `401`: Invalid or expired link.
- `403`: Access revoked.
- `404`: File unavailable.
- `409`: File area closed.
- `503`: Storage unavailable.

---

[API](https://skmtc.dev/toma/apis/toma-api.md) - [All operations](https://skmtc.dev/toma/apis/toma-api/llms.txt) - [OpenAPI document](https://skmtc.dev/toma/apis/toma-api/revisions/b4e56e1db5a2?raw)