---
title: "Download an attachment"
method: GET
path: "/v1/email/attachments/{attachmentId}"
tags: ["Email"]
---

# Download an attachment

`GET /v1/email/attachments/{attachmentId}`

## Request

- Base URL: `https://zernio.com/api`
- URL: `https://zernio.com/api/v1/email/attachments/{attachmentId}`
- Auth: HTTP bearer

Streams the attachment bytes with its `Content-Type` and a `Content-Disposition` carrying the filename.

## Path parameters

- `attachmentId` string, required

## Query parameters

- `accountId` string, required
- `messageId` string, required

## Response `200`

The attachment bytes

## Other responses

- `400`: Invalid request
- `401`: Missing or invalid API key. `code` is `missing_credentials` when no Authorization header was sent and `invalid_credentials` when the key is unknown, revoked or expired.
- `404`: Resource not found
- `412`: The connected account cannot serve this request until something outside the request changes. Two codes: - `account_scope_missing`: the account was connected without the area this endpoint needs (`details.grantedAreas`, `details.missingArea`), or Google reports the grant lacks a permission. Reconnect with a wider `scopes=`. - `admin_consent_required` (Microsoft): the tenant requires an administrator's approval. `details.adminConsentUrl` is the Microsoft Entra admin-consent link to hand to one; it opens in a browser with no API key and stays valid for one hour. `GET /v1/connect/microsoft/admin-consent` mints a fresh one.

## Changes

- **2026-10-27** `0a24331f5431`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/zernio/apis/zernio-api/changes/v1/email/attachments/:attachmentId/get.md)

---

[API](https://skmtc.dev/zernio/apis/zernio-api.md) - [All operations](https://skmtc.dev/zernio/apis/zernio-api/llms.txt) - [OpenAPI document](https://skmtc.dev/zernio/apis/zernio-api/revisions/c319eb5d95b6?raw)