> ## Documentation Index
> Fetch the complete documentation index at: https://docs.trama.so/llms.txt
> Use this file to discover all available pages before exploring further.

# List the attachments of a quote

> Each attachment comes with a SIGNED, short-lived download URL. Fetch the file when you receive it; do not store the URL — it expires. Unlike catalog images, which live in a public bucket, quote attachments are private.



## OpenAPI

````yaml /openapi.json get /v1/quotes/{quoteId}/attachments
openapi: 3.1.0
info:
  description: >-
    Trama's REST API. Authenticate with an organization API key, created under
    Settings → Developers, and send it as `Authorization: Bearer <key>` (or in
    the `x-api-key` header).


    Every key is bound to ONE organization: everything this API returns and
    everything it writes stays inside that organization, and no request ever
    names it.


    Errors always come back as `{ "error": { "code", "message" } }`. Branch on
    `code` — it is stable; the `message` text is not.
  title: Trama API
  version: 1.0.0
servers:
  - url: https://api.trama.so
security:
  - bearerAuth: []
  - apiKeyHeader: []
paths:
  /v1/quotes/{quoteId}/attachments:
    get:
      tags:
        - Quotes
      summary: List the attachments of a quote
      description: >-
        Each attachment comes with a SIGNED, short-lived download URL. Fetch the
        file when you receive it; do not store the URL — it expires. Unlike
        catalog images, which live in a public bucket, quote attachments are
        private.
      parameters:
        - in: path
          name: quoteId
          required: true
          schema:
            type: string
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/QuoteAttachmentList'
          description: The attachments, with signed URLs.
        '400':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
          description: The request is not valid.
        '401':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
          description: The API key is missing or not valid.
        '404':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
          description: The resource does not exist in this organization.
        '409':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
          description: Conflict with the current state of the resource.
        '429':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
          description: The API key exceeded its request limit. Retry later.
components:
  schemas:
    QuoteAttachmentList:
      properties:
        data:
          items:
            $ref: '#/components/schemas/QuoteAttachment'
          type: array
      required:
        - data
      type: object
    ErrorResponse:
      properties:
        error:
          $ref: '#/components/schemas/ApiError'
      required:
        - error
      type: object
    QuoteAttachment:
      properties:
        fileName:
          type: string
        id:
          type: string
        kind:
          type: string
        mimeType:
          type: string
        sizeBytes:
          type: integer
        url:
          description: >-
            SIGNED download URL, and short-lived by design — it is a download
            credential, not a permanent link. Fetch the file when you receive
            it; do not store the URL.
          type: string
      required:
        - fileName
        - id
        - kind
        - mimeType
        - sizeBytes
        - url
      type: object
    ApiError:
      properties:
        code:
          description: >-
            A stable, machine-readable code. Branch on this — the `message` text
            may change, the code will not.
          example: CATALOG_PRODUCT_NOT_FOUND
          type: string
        message:
          example: The catalog product does not exist.
          type: string
      required:
        - code
        - message
      type: object
  securitySchemes:
    bearerAuth:
      bearerFormat: API key
      description: 'The organization API key, sent as `Authorization: Bearer <key>`.'
      scheme: bearer
      type: http
    apiKeyHeader:
      description: The same API key, sent in the `x-api-key` header.
      in: header
      name: x-api-key
      type: apiKey

````