Download a team's design-system asset
Returns original Media Library bytes after checking team ownership and read access. Use the asset URL from getTeamDesignSystem or getTeamAgentContext with an authenticated API request or session cookie. Responses are private and must not be cached.
/v1/teams/{teamId}/design-system/assets/{attachmentId}AuthorizationBearer token · headerrequiredBetter Auth session, OAuth access token, OAuth client-credentials token, or sfm_ Space machine credential.
__Host-better-auth.session_tokenAPI key · cookierequiredSigned-in browser session, set by the dashboard sign-in flow. An operation that declares only this one needs a person behind the request: an API key or machine credential is refused. The same session token is also accepted as Authorization: Bearer.
AuthorizationOAuth2 access token · headerrequiredOAuth 2.0 with explicit Spacefast capability scopes. Use the authorization-code flow for people and client credentials for machines.
spaces:readteamIdstringrequiredattachmentIdintegerrequiredAttachment bytes
string<binary>Problem details (RFC 9457). Any 4xx/5xx response is one application/problem+json document.
$schemastring<uri>Canonical JSON Schema URL for this response body. The server also sends it in the Link: rel="describedby" response header.
typestringrequiredProblem type URI resolving to the error docs page. The server derives it mechanically from code against the docs origin.
titlestringrequiredShort human-readable summary of the problem type. The server derives it mechanically from code.
statusintegerrequiredHTTP status code of this response, repeated in the body.
detailstringrequiredHuman-readable failure explanation for this occurrence.
codestringrequiredStable snake_case error code naming the failed public contract.
pointerstringRFC 6901 JSON Pointer into the failing request field, for example "/files/37/path", on validation failures.
detailsobjectMachine-readable context for the error code.
fixstringOne sentence on what to do about this error code, the same text as the type page. Read it before retrying.
suggestionsstring[]Actionable recovery steps safe to show in dashboards, SDKs, and CLI output.
nextstring[]Copy-pasteable commands or API requests an agent can run next.
requestIdstringrequiredThe request id to quote when contacting support.