`entries.evidence.download`

Open one verified supporting invoice original PDF or image linked through email to an exact entry using id and evidenceId from entries.get. Returns an authenticated URL, never a reusable storage token. Every GET checks current company, record and evidence access, including accountant permission expiry and revocation. Supporting email originals require the existing email permission and do not grant access to sibling attachments.

GETPOST/api/v1/accounting/entries.evidence.download

Permissions

accounting:read

Who can call it

admin, finance, contributor

Retries

Safe to retry: it only reads

MCP

accounting_get_record_original

Fields

idstring (ID)Required
The record's ID.
evidenceIdstring (ID)Required
The ID of the related record.

curl -G https://app.getoatmilk.com/api/v1/accounting/entries.evidence.download \
  -H "Authorization: Bearer $OATMILK_API_KEY" \
  --data-urlencode 'id=9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d' \
  --data-urlencode 'evidenceId=1a2b3c4d-5e6f-4a7b-8c9d-0e1f2a3b4c5d'

const response = await fetch("https://app.getoatmilk.com/api/v1/accounting/entries.evidence.download?id=9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d&evidenceId=1a2b3c4d-5e6f-4a7b-8c9d-0e1f2a3b4c5d", {
  headers: {
    Authorization: `Bearer ${process.env.OATMILK_API_KEY}`,
  },
});
const { data, error } = await response.json();
if (!response.ok) throw new Error(`${error.code}: ${error.message}`);
console.log(data);

import os

import requests

response = requests.get(
    "https://app.getoatmilk.com/api/v1/accounting/entries.evidence.download",
    headers={
        "Authorization": f"Bearer {os.environ['OATMILK_API_KEY']}",
    },
    params={
        "id": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
        "evidenceId": "1a2b3c4d-5e6f-4a7b-8c9d-0e1f2a3b4c5d",
    },
    timeout=30,
)
payload = response.json()
if not response.ok:
    raise RuntimeError(f"{payload['error']['code']}: {payload['error']['message']}")
print(payload["data"])

Response

{
  "data": { … }
}

Try it

Checks your input with this action’s real schema and answers like the API, with synthetic data. No key needed, and nothing changes.

Input

GET/api/v1/accounting/entries.evidence.download

curl -G https://app.getoatmilk.com/api/v1/accounting/entries.evidence.download \
  -H "Authorization: Bearer $OATMILK_API_KEY" \
  --data-urlencode 'id=9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d' \
  --data-urlencode 'evidenceId=1a2b3c4d-5e6f-4a7b-8c9d-0e1f2a3b4c5d'

const response = await fetch("https://app.getoatmilk.com/api/v1/accounting/entries.evidence.download?id=9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d&evidenceId=1a2b3c4d-5e6f-4a7b-8c9d-0e1f2a3b4c5d", {
  headers: {
    Authorization: `Bearer ${process.env.OATMILK_API_KEY}`,
  },
});
const { data, error } = await response.json();
if (!response.ok) throw new Error(`${error.code}: ${error.message}`);
console.log(data);

import os

import requests

response = requests.get(
    "https://app.getoatmilk.com/api/v1/accounting/entries.evidence.download",
    headers={
        "Authorization": f"Bearer {os.environ['OATMILK_API_KEY']}",
    },
    params={
        "id": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
        "evidenceId": "1a2b3c4d-5e6f-4a7b-8c9d-0e1f2a3b4c5d",
    },
    timeout=30,
)
payload = response.json()
if not response.ok:
    raise RuntimeError(f"{payload['error']['code']}: {payload['error']['message']}")
print(payload["data"])

Fields

Example

Try it