---
title: "Download a private context original with a temporary link"
method: GET
path: "/api/resource-transfers/download"
---

# Download a private context original with a temporary link

`GET /api/resource-transfers/download`

## Request

- Base URL: `https://www.toma.com`
- URL: `https://www.toma.com/api/resource-transfers/download`
- Auth: none required

Use the private URL returned by download_my_resource. Its short-lived token is bound to one member, context version, asset, and original track. Deletion, a new current version, account closure, or expiry revokes access. Recording access is checked before and after storage reads. Keep this bearer URL private.

## Query parameters

- `token` string, required

## Response `200`

Private original attachment with no-store and nosniff headers.

## Other responses

- `206`: Requested recording byte range.
- `401`: Invalid or expired transfer link.
- `403`: Owner access or context version changed.
- `404`: Context or task creation is missing, removed, or owned by another member.
- `416`: Invalid recording byte range.

---

[API](https://skmtc.dev/toma/apis/toma-api.md) - [All operations](https://skmtc.dev/toma/apis/toma-api/llms.txt) - [OpenAPI document](https://skmtc.dev/toma/apis/toma-api/revisions/b4e56e1db5a2?raw)