01
Attachment metadata#
Message and thread responses list each attachment with its ID, filename, content type, and size, so an agent can decide what to fetch before downloading anything.
02
Download#
Streams the file with Content-Type and Content-Disposition headers. The request needs a key that can read the inbox. If the original file isn't available for a message, the endpoint returns the attachment metadata with download set to null.
Shell
curl -OJ https://botinbox.dev/v0/inboxes/INBOX_ID/messages/MESSAGE_ID/attachments/ATTACHMENT_ID \
-H "Authorization: Bearer $BOTINBOX_API_KEY"Note
Attachments come from third parties. Scan or sandbox files before an agent opens or executes them.