Skip to navigation
API ReferenceTrade Messages

Read a private message attachment

Read a private message attachment.

Credential: Customer session or partner secret

Before you call

  • A customer session, or an owning partner server credential without Origin.
  • A trade you own. You can send messages while it is CREATED, PAID or DISPUTED.

Read the private original attachment for an owned trade, including after settlement. Missing images and unowned trades return 404. Read contentType from the response: original merchant attachments may have other image formats or application/octet-stream and are not limited by the customer upload size. Storage unavailability can return 502 or 503 UPSTREAM_ERROR; retry with backoff and quote requestId if it persists.

Confirm with Sinbad that this endpoint is enabled in your environment.

Errors

StatusCodeWhat to do
400VALIDATION_ERRORCorrect the fields reported in details before retrying.
401UNAUTHENTICATEDCreate a new customer session or use a valid server credential.
403FORBIDDENCheck credential ownership, integration and the supplied Origin.
404NOT_FOUNDCheck the resource ID. A resource that belongs to someone else also returns 404.
409CONFLICTRead the current state again before you prepare or retry.
502UPSTREAM_ERRORRetry with backoff and quote requestId if it persists. For transaction reports, retry the same hash without sending another transaction.
503UPSTREAM_ERRORRetry with backoff; preserve the same idempotency key for a repeated mutation.

Authentication

AuthorizationBearer

Bearer authentication of the form Bearer <token>, where token is your auth token.

OR
AuthorizationBearer

Bearer authentication of the form Bearer <token>, where token is your auth token.

Path parameters

tradeIdstringRequired
messageIdstringRequiredformat: "^[A-Za-z0-9_-]{1,128}$"

Response

Private image or proof-PDF bytes as base64; no public URL. A proof message can remain readable after the active proof is removed.

contentTypestring

Original attachment content type; may include image/webp, image/gif, image/heif or application/octet-stream.

sizeinteger>=1
dataBase64stringformat: "byte"

Errors

400
Bad Request Error
401
Unauthorized Error
403
Forbidden Error
404
Not Found Error
409
Conflict Error
502
Bad Gateway Error
503
Service Unavailable Error