---
title: "Download the signed artifact"
method: GET
path: "/v1/signatures/{signatureId}/document"
tags: ["Signatures"]
---

# Download the signed artifact

`GET /v1/signatures/{signatureId}/document`

## Request

- Base URL: `https://sign-api.tvarka.pro`
- URL: `https://sign-api.tvarka.pro/v1/signatures/{signatureId}/document`
- Auth: one of:
  - HTTP bearer
  - API key in header `X-Api-Key`
  - OAuth 2 (authorization code, authorization URL `https://sign-api.tvarka.pro/oauth/authorize`, token URL `https://sign-api.tvarka.pro/oauth/token`, scopes: `sign.read`, `sign.signings`)

`.p7s` (`application/pkcs7-signature`) for `cades-detached`, the
signed PDF for `pades`. Kept for 30 days or until
`/v1/erasure`; afterwards `410`. A sandbox simulation streams an
artifact with no signature, marked by `X-Tvarka-Sandbox`.

## Path parameters

- `signatureId` string, uuid, required

## Response `200`

The signed artifact.

## Other responses

- `401`: An RFC 9457 problem document.
- `402`: An RFC 9457 problem document.
- `403`: An RFC 9457 problem document.
- `404`: An RFC 9457 problem document.
- `409`: The signature is not signed.
- `410`: The artifact was erased; the signature record remains.
- `429`: An RFC 9457 problem document.
- `503`: An RFC 9457 problem document.

---

[API](https://skmtc.dev/tvarka/apis/tvarka-sign-api.md) · [All operations](https://skmtc.dev/tvarka/apis/tvarka-sign-api/llms.txt) · [OpenAPI document](https://skmtc.dev/tvarka/apis/tvarka-sign-api/revisions/e3fdd995c013?raw)