Play an inbound attachment without exposing messaging credentials

Resolves only a saved inbound message in the requested workspace. Requires current workspace membership, contact visibility and a server-signed attachment provenance marker from a verified provider webhook. Provider media is limited to 50 MiB and fetched with server-side authentication.

GET

https://api.channelautomation.com/api/livechat/messages/{messageId}/media/{mediaIndex}

Authorization

BearerAuth
HTTP Bearer (JWT)
required

Path parameters

messageId
string
required
format: uuid
mediaIndex
integer
required
minimum: 0

Query parameters

workspaceId
string
required

Returns

200

Private image, video or audio bytes

400

Invalid workspace

401

Verified user session required

403

Membership

404

Saved inbound attachment not found

413

Attachment exceeds playback size limit

415

Unsupported media format

502

Provider media unavailable

503

Access verification unavailable

Play an inbound attachment without exposing messaging credentials

curl --request GET \
  --url 'https://api.channelautomation.com/api/livechat/messages/<messageId>/media/<mediaIndex>?workspaceId=string' \
  --header 'Authorization: Bearer <token>'

const url = 'https://api.channelautomation.com/api/livechat/messages/<messageId>/media/<mediaIndex>?workspaceId=string';
const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch(url, options)
  .then(res => res.json())
  .then(json => console.log(json))
  .catch(err => console.error(err));

import requests

url = "https://api.channelautomation.com/api/livechat/messages/<messageId>/media/<mediaIndex>?workspaceId=string"

headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, headers=headers)

print(response.text)

Response example

string