# tax.hst.evidence.download

Open one GST/HST supporting original through a fresh authenticated download, using kind receipt with entryId and evidenceId, or kind statement with accountId and documentId. Every GET rechecks current company access, account/period scope, expiry and revocation. Mixed-period or ambiguous originals are refused. Returns a login/OAuth-required URL, never a reusable storage token. Does not expose tax identity documents or export the books.

`GET | POST /api/v1/accounting/tax.hst.evidence.download`

Permissions: `accounting:read` · Roles: admin, finance

MCP tool: `accounting_tax_hst_evidence_download`

## Fields

#### kind: "receipt"

| Field | Type | Required | Notes |
| --- | --- | --- | --- |
| `kind` | "receipt" | Yes | Which kind of record or job this is. |
| `entryId` | string (ID) | Yes | The ID of an accounting entry, from entries.list or attention.mine. |
| `evidenceId` | string (ID) | Yes | The ID of the related record. |

#### kind: "statement"

| Field | Type | Required | Notes |
| --- | --- | --- | --- |
| `kind` | "statement" | Yes | Which kind of record or job this is. |
| `accountId` | string (ID) | Yes | The ID of a bank, card or payment account, from accounts.list. |
| `documentId` | string (ID) | Yes | The ID of the related record. |

## Example request

```bash
curl -G https://app.getoatmilk.com/api/v1/accounting/tax.hst.evidence.download \
  -H "Authorization: Bearer $OATMILK_API_KEY" \
  --data-urlencode 'kind=receipt' \
  --data-urlencode 'entryId=7f0f6c1e-1c1f-4b5e-9c8d-2f5e8e3c1a10' \
  --data-urlencode 'evidenceId=1a2b3c4d-5e6f-4a7b-8c9d-0e1f2a3b4c5d'
```

Reference page: https://app.getoatmilk.com/docs/api/tax.hst.evidence.download