> ## Documentation Index
> Fetch the complete documentation index at: https://docs.agents.labs.bandwidth.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Create a file download URL

> Create a short-lived download URL for an authorized workspace file.

Use the exact `key` returned with the resource rather than constructing one. `expires_in` defaults to 900 seconds and ranges from 60 to 900. Set `inline=true` for browser display when appropriate. A key outside your permitted resources returns `403`; malformed keys return `400`.

The response contains `url` and `expires_in`. Treat the URL as sensitive until it expires. Download directly without forwarding your Agent Builder credential to the file host. Omit `storage_backend` unless you are using the value returned by the resource.


## OpenAPI

````yaml GET /api/v1/s3/signed-url
openapi: 3.1.0
info:
  title: Bandwidth Agent Builder API
  version: v1
  description: >-
    Manage agents, place calls, and retrieve conversation results in your
    workspace.
servers:
  - url: https://agents.labs.bandwidth.com
    description: Workspace API
security: []
paths:
  /api/v1/s3/signed-url:
    get:
      tags:
        - files
      summary: Create a file download URL
      description: >-
        **Authorization:** Accepts a Labs OAuth bearer token or a Labs API key.
        Workspace-scoped resources require membership in the requested
        workspace.


        Create a short-lived download URL for an authorized workspace file.
      operationId: get_signed_url_api_v1_s3_signed_url_get
      parameters:
        - description: S3 object key
          in: query
          name: key
          required: true
          schema:
            description: S3 object key
            title: Key
            type: string
        - in: query
          name: expires_in
          required: false
          schema:
            default: 900
            maximum: 900
            minimum: 60
            title: Expires In
            type: integer
        - in: query
          name: inline
          required: false
          schema:
            default: false
            title: Inline
            type: boolean
        - description: >-
            Storage backend to use (e.g. 'minio', 's3'). When omitted the
            backend is inferred from the resource.
          in: query
          name: storage_backend
          required: false
          schema:
            anyOf:
              - type: string
              - type: 'null'
            description: >-
              Storage backend to use (e.g. 'minio', 's3'). When omitted the
              backend is inferred from the resource.
            title: Storage Backend
        - description: >-
            Required with X-BW-LABS-AGENTS-API-KEY: the positive local workspace
            ID to access. The key owner must be a current member. Missing or
            invalid IDs return 400; non-member workspaces return 403. Not
            required for bearer authentication, which uses the user's selected
            workspace.
          in: header
          name: X-VOAI-ORGANIZATION-ID
          required: false
          schema:
            anyOf:
              - type: string
              - type: 'null'
            description: >-
              Required with X-BW-LABS-AGENTS-API-KEY: the positive local
              workspace ID to access. The key owner must be a current member.
              Missing or invalid IDs return 400; non-member workspaces return
              403. Not required for bearer authentication, which uses the user's
              selected workspace.
            title: X-Voai-Organization-Id
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/S3SignedUrlResponse'
          description: Successful Response
        '400':
          description: Invalid request or missing/invalid workspace header with an API key.
        '401':
          description: Missing, invalid, or expired credential.
        '403':
          description: >-
            The account lacks access to the workspace, resource, or required
            role.
        '404':
          description: Not found
        '422':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
          description: Validation Error
      security:
        - LabsAuth: []
        - LabsApiKey: []
components:
  schemas:
    S3SignedUrlResponse:
      properties:
        expires_in:
          title: Expires In
          type: integer
        url:
          title: Url
          type: string
      required:
        - url
        - expires_in
      title: S3SignedUrlResponse
      type: object
    HTTPValidationError:
      properties:
        detail:
          items:
            $ref: '#/components/schemas/ValidationError'
          title: Detail
          type: array
      title: HTTPValidationError
      type: object
    ValidationError:
      properties:
        ctx:
          title: Context
          type: object
        input:
          title: Input
        loc:
          items:
            anyOf:
              - type: string
              - type: integer
          title: Location
          type: array
        msg:
          title: Message
          type: string
        type:
          title: Error Type
          type: string
      required:
        - loc
        - msg
        - type
      title: ValidationError
      type: object
  securitySchemes:
    LabsAuth:
      description: >-
        Bandwidth Labs OAuth access token. Uses the user's selected workspace;
        the workspace header is not required. Do not also send an API key.
        Bearer-only operations may additionally require the Labs `super_user`
        role.
      scheme: bearer
      type: http
    LabsApiKey:
      description: >-
        Bandwidth Labs API key. Also send `X-VOAI-ORGANIZATION-ID` with a
        positive local workspace ID belonging to the key owner. Access follows
        the owner's current workspace role. Do not also send a bearer token. API
        keys cannot access bearer-only or Labs `super_user` operations.
      in: header
      name: X-BW-LABS-AGENTS-API-KEY
      type: apiKey

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.