---
title: "Read protected preview media"
method: GET
path: "/api/task-creations/{id}/media"
---

# Read protected preview media

`GET /api/task-creations/{id}/media`

## Request

- Base URL: `https://www.toma.com`
- URL: `https://www.toma.com/api/task-creations/{id}/media`
- Auth: one of:
  - HTTP bearer
  - API key in cookie `better-auth.session_token`
  - API key in header `x-task-creation-token`

Validates ownership or the capability on every request. A successful capability-authenticated session GET sets a media-only HttpOnly cookie for browser playback. Supports HEAD and byte Range requests. Never put recording tokens in query strings.

## Path parameters

- `id` string, required

## Query parameters

- `asset` 'video' | 'audio' | 'file' | 'captions' | 'thumbnail', required
- `section` string
- `contribution` string
- `revision` integer
- `chapter` string
- `track` string
- `timestampMs` integer

## Response `200`

Authorized private preview video, audio, file, WebVTT, or thumbnail.

## Other responses

- `206`: Byte range.
- `400`: Invalid input.
- `401`: Sign in or use a valid recording capability.
- `404`: Not found, expired, revoked, or owned by another member.
- `409`: The revision, take, upload sequence, or processing state changed. Fetch the current session.
- `503`: Processing or storage is unavailable. No publication was made.

---

[API](https://skmtc.dev/toma/apis/toma-api.md) - [All operations](https://skmtc.dev/toma/apis/toma-api/llms.txt) - [OpenAPI document](https://skmtc.dev/toma/apis/toma-api/revisions/b4e56e1db5a2?raw)