# entries.evidence.download

Open one verified supporting invoice original PDF or image linked through email to an exact entry using id and evidenceId from entries.get. Returns an authenticated URL, never a reusable storage token. Every GET checks current company, record and evidence access, including accountant permission expiry and revocation. Supporting email originals require the existing email permission and do not grant access to sibling attachments.

`GET | POST /api/v1/accounting/entries.evidence.download`

Permissions: `accounting:read` · Roles: admin, finance, contributor

MCP tool: `accounting_get_record_original`

## Fields

| Field | Type | Required | Notes |
| --- | --- | --- | --- |
| `id` | string (ID) | Yes | The record's ID. |
| `evidenceId` | string (ID) | Yes | The ID of the related record. |

## Example request

```bash
curl -G https://app.getoatmilk.com/api/v1/accounting/entries.evidence.download \
  -H "Authorization: Bearer $OATMILK_API_KEY" \
  --data-urlencode 'id=9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d' \
  --data-urlencode 'evidenceId=1a2b3c4d-5e6f-4a7b-8c9d-0e1f2a3b4c5d'
```

Reference page: https://app.getoatmilk.com/docs/api/entries.evidence.download