---
title: "Download Document Endpoint"
method: GET
path: "/api/v1/documents/{document_id}/download"
tags: ["Documents"]
---

# Download Document Endpoint

`GET /api/v1/documents/{document_id}/download`

## Request

- Base URL: `https://api.withverifa.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.withverifa.com/api/v1/documents/{document_id}/download`
- Auth: none declared

Download a document by ID using a signed URL.

Auth requires BOTH a valid HMAC signature (``expires`` + ``sig``) AND a
valid API key / cookie session — defence-in-depth so a leaked URL alone
cannot be replayed by an unauthenticated attacker. The signature is also
bound to the caller's ``org_id`` so a leaked URL cannot be used to fetch
a same-IDed document belonging to a different org.

## Path parameters

- `document_id` string, required

## Query parameters

- `expires` integer, required
- `sig` string, required

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/withverifa/apis/verifa.md) · [All operations](https://skmtc.dev/withverifa/apis/verifa/llms.txt) · [OpenAPI document](https://skmtc.dev/withverifa/apis/verifa/revisions/7288c82c9e33?raw)