Get file content

Get a short-lived download URL for stored file content.

GET/namespaces/{namespace}/collections/{collection}/files/{file}/content

PermissionCluster key, or a scoped key with read (write includes read). Key scopes and actions.

The response is JSON with url and expires_at. Fetch the bytes from that URL.
An external source can return external_source when the connector cannot issue a signed download URL. Serve those bytes from your own object store.
A pending upload or content copy may return operation_in_progress.

Request

https://engine.example.com/namespaces/acme/collections/incident-logs/files/fil_01K6Q6N7D8E9F0G1H2J3K4M5N6/content

GET /namespaces/acme/collections/incident-logs/files/fil_01K6Q6N7D8E9F0G1H2J3K4M5N6/content HTTP/1.1
Host: engine.example.com
Authorization: Bearer <GRAPHON_ENGINE_API_KEY>

Replace engine.example.com with your cluster host. Examples use a key placeholder.

Response

200

A signed URL for a separate GET of the bytes.

{
  "url": "https://storage.example.com/download/incident?signature=example",
  "expires_at": "2026-10-06T10:15:00Z"
}

Path parameters

namespacestringrequired

Namespace name or ns_ ID. It must be visible to this key.

collectionstringrequired

Collection name or col_ ID within the namespace. It must be visible to this key.

filestringrequired

File ID with the fil_ prefix, or a file path encoded as one URL segment. Encode each / as %2F. Exact path lookup is also available with GET files?path=.

Responses

200Success

A signed URL for a separate GET of the bytes.

application/json

Response headers

x-engine-request-idstringrequired

The Engine request ID. Retain it when investigating a failed or unexpected request.

x-request-idstringrequired

The X-Request-Id you sent, echoed when it is a valid ID. Otherwise, the Engine request ID.

expires_atstring (date-time)required

ISO 8601 UTC time after which the signed download URL expires.

urlstringrequired

Short-lived URL to GET the file bytes. The API returns this URL as JSON, not as a redirect or the file itself.

Errors

Select an error in the response example to see its JSON body. See error handling for the common error format.

400invalid_request

A field, path, parameter, or conditional request rule is invalid.

What to do: Correct the request. Unknown fields are rejected.

401unauthenticated

The API key is missing, invalid, or revoked.

What to do: Send an active key in Authorization: Bearer or X-API-Key.

403forbidden

The key can see the resource but lacks permission for this operation.

What to do: Use a key with the required action or scope kind.

404not_found

The resource is absent, deleted, or outside this key’s scope.

What to do: Check the identifier and the key’s namespace and collection scope.

409external_source

The API cannot provide a signed download URL for this external source.

What to do: Read the bytes from the source object store using your own application’s access controls.

409operation_in_progress

An unfinished operation conflicts with this request.

What to do: Inspect the existing job and wait for its completion event before retrying.

503temporarily_unavailable

A dependency, cluster readiness condition, or capacity limit prevents this operation.

What to do: Inspect retryable and details. Retry only when permitted, preserving the idempotency key for the same write.

500internal_error

An unexpected server failure prevented this request from completing.

What to do: Retain request_id for investigation. Follow retryable before retrying a write.

Was this page helpful?

View as Markdown