`tax.hst.evidence.download`

Open one GST/HST supporting original through a fresh authenticated download, using kind receipt with entryId and evidenceId, or kind statement with accountId and documentId. Every GET rechecks current company access, account/period scope, expiry and revocation. Mixed-period or ambiguous originals are refused. Returns a login/OAuth-required URL, never a reusable storage token. Does not expose tax identity documents or export the books.

GETPOST/api/v1/accounting/tax.hst.evidence.download

Permissions

accounting:read

Who can call it

admin, finance

Retries

Safe to retry: it only reads

MCP

accounting_tax_hst_evidence_download

Fields

Shape 1: kind: "receipt"

kind"receipt"Required
Which kind of record or job this is.
entryIdstring (ID)Required
The ID of an accounting entry, from entries.list or attention.mine.
evidenceIdstring (ID)Required
The ID of the related record.

Shape 2: kind: "statement"

kind"statement"Required
Which kind of record or job this is.
accountIdstring (ID)Required
The ID of a bank, card or payment account, from accounts.list.
documentIdstring (ID)Required
The ID of the related record.

curl -G https://app.getoatmilk.com/api/v1/accounting/tax.hst.evidence.download \
  -H "Authorization: Bearer $OATMILK_API_KEY" \
  --data-urlencode 'kind=receipt' \
  --data-urlencode 'entryId=7f0f6c1e-1c1f-4b5e-9c8d-2f5e8e3c1a10' \
  --data-urlencode 'evidenceId=1a2b3c4d-5e6f-4a7b-8c9d-0e1f2a3b4c5d'

const response = await fetch("https://app.getoatmilk.com/api/v1/accounting/tax.hst.evidence.download?kind=receipt&entryId=7f0f6c1e-1c1f-4b5e-9c8d-2f5e8e3c1a10&evidenceId=1a2b3c4d-5e6f-4a7b-8c9d-0e1f2a3b4c5d", {
  headers: {
    Authorization: `Bearer ${process.env.OATMILK_API_KEY}`,
  },
});
const { data, error } = await response.json();
if (!response.ok) throw new Error(`${error.code}: ${error.message}`);
console.log(data);

import os

import requests

response = requests.get(
    "https://app.getoatmilk.com/api/v1/accounting/tax.hst.evidence.download",
    headers={
        "Authorization": f"Bearer {os.environ['OATMILK_API_KEY']}",
    },
    params={
        "kind": "receipt",
        "entryId": "7f0f6c1e-1c1f-4b5e-9c8d-2f5e8e3c1a10",
        "evidenceId": "1a2b3c4d-5e6f-4a7b-8c9d-0e1f2a3b4c5d",
    },
    timeout=30,
)
payload = response.json()
if not response.ok:
    raise RuntimeError(f"{payload['error']['code']}: {payload['error']['message']}")
print(payload["data"])

Response

{
  "data": { … }
}

Try it

Checks your input with this action’s real schema and answers like the API, with synthetic data. No key needed, and nothing changes.

Input

GET/api/v1/accounting/tax.hst.evidence.download

curl -G https://app.getoatmilk.com/api/v1/accounting/tax.hst.evidence.download \
  -H "Authorization: Bearer $OATMILK_API_KEY" \
  --data-urlencode 'kind=receipt' \
  --data-urlencode 'entryId=7f0f6c1e-1c1f-4b5e-9c8d-2f5e8e3c1a10' \
  --data-urlencode 'evidenceId=1a2b3c4d-5e6f-4a7b-8c9d-0e1f2a3b4c5d'

const response = await fetch("https://app.getoatmilk.com/api/v1/accounting/tax.hst.evidence.download?kind=receipt&entryId=7f0f6c1e-1c1f-4b5e-9c8d-2f5e8e3c1a10&evidenceId=1a2b3c4d-5e6f-4a7b-8c9d-0e1f2a3b4c5d", {
  headers: {
    Authorization: `Bearer ${process.env.OATMILK_API_KEY}`,
  },
});
const { data, error } = await response.json();
if (!response.ok) throw new Error(`${error.code}: ${error.message}`);
console.log(data);

import os

import requests

response = requests.get(
    "https://app.getoatmilk.com/api/v1/accounting/tax.hst.evidence.download",
    headers={
        "Authorization": f"Bearer {os.environ['OATMILK_API_KEY']}",
    },
    params={
        "kind": "receipt",
        "entryId": "7f0f6c1e-1c1f-4b5e-9c8d-2f5e8e3c1a10",
        "evidenceId": "1a2b3c4d-5e6f-4a7b-8c9d-0e1f2a3b4c5d",
    },
    timeout=30,
)
payload = response.json()
if not response.ok:
    raise RuntimeError(f"{payload['error']['code']}: {payload['error']['message']}")
print(payload["data"])

Fields

Example

Try it