> ## Documentation Index > Fetch the complete documentation index at: https://developer.finogates.com/llms.txt > Use this file to discover all available pages before exploring further. # Get a Submitted File > One file, with a short-lived ``download_url`` if it was cleared. A file that is still pending, infected or unscannable comes back with its status and **no link** — there is no parameter that changes that. **The link is minted per call and is not stable.** Each request signs a fresh URL valid for ``expires_in`` seconds (default 900). Two calls in the same second happen to produce an identical string; any later call produces a different one, because the signature covers a second-precision timestamp. Treat every issued link as live until its own expiry: asking for a new one does **not** revoke the previous one. So request a link when you are about to use it rather than caching it, and prefer a short ``expires_in`` — a link that leaks stays usable for its full window, with no authentication in front of it. A file belonging to another platform answers 404 rather than 403, so the response does not confirm that the id exists. ## OpenAPI ````yaml GET /v1/platform/file-scans/{file_id} openapi: 3.1.0 info: title: Finogate Platform API v1 version: 0.1.0 servers: - url: https://api-sandbox.finogates.com description: Sandbox - url: https://api.finogates.com description: Production security: [] tags: - name: auth - name: users - name: payees - name: verification - name: bank accounts - name: card processing - name: digital-assets - name: international - name: fees - name: onboarding - name: pending-applications - name: wallets - name: payments - name: document mailing - name: merchant onboarding - name: catalog - name: webhooks - name: screening - name: Platform - File Scanning - name: phone-numbers - name: sms - name: calls - name: listings - name: Card Transfers - name: embed-tokens paths: /v1/platform/file-scans/{file_id}: get: tags: - Platform - File Scanning summary: Get Submitted File description: >- One file, with a short-lived ``download_url`` if it was cleared. A file that is still pending, infected or unscannable comes back with its status and **no link** — there is no parameter that changes that. **The link is minted per call and is not stable.** Each request signs a fresh URL valid for ``expires_in`` seconds (default 900). Two calls in the same second happen to produce an identical string; any later call produces a different one, because the signature covers a second-precision timestamp. Treat every issued link as live until its own expiry: asking for a new one does **not** revoke the previous one. So request a link when you are about to use it rather than caching it, and prefer a short ``expires_in`` — a link that leaks stays usable for its full window, with no authentication in front of it. A file belonging to another platform answers 404 rather than 403, so the response does not confirm that the id exists. operationId: get_submitted_file_v1_platform_file_scans__file_id__get parameters: - name: file_id in: path required: true schema: type: string format: uuid title: File Id - name: expires_in in: query required: false schema: anyOf: - type: integer maximum: 3600 minimum: 60 - type: 'null' description: Requested lifetime of the download link, in seconds. title: Expires In description: Requested lifetime of the download link, in seconds. responses: '200': description: >- One file, with a short-lived `download_url` only when the verdict is `clean`. content: application/json: schema: $ref: '#/components/schemas/CommonResponse_FileScanRead_' example: status_code: 200 data: id: 7c4d2e1a-8b3f-4d6c-9a1e-5f2b3c4d5e6f status: clean file_name: signed-contract.pdf content_type: application/pdf declared_content_type: application/pdf size_bytes: 248193 category: contracts created_at: '2026-06-02T10:30:00Z' scanned_at: '2026-06-02T10:30:12Z' download_url: >- https://scan-downloads.example.com/7c4d2e1a-8b3f-4d6c-9a1e-5f2b3c4d5e6f?token=short-lived-signature expires_in: 900 query_generated_time: 1712847600000 '422': description: Validation Error content: application/json: schema: $ref: '#/components/schemas/HTTPValidationError' security: - _AuthenticatedBearer: [] components: schemas: CommonResponse_FileScanRead_: properties: status_code: type: integer title: Status Code description: HTTP status code for the response. data: $ref: '#/components/schemas/FileScanRead' description: Payload or error details. query_generated_time: type: integer title: Query Generated Time description: >- UTC timestamp (milliseconds since epoch) when response was generated. type: object required: - status_code - data - query_generated_time title: CommonResponse[FileScanRead] HTTPValidationError: properties: detail: items: $ref: '#/components/schemas/ValidationError' type: array title: Detail type: object title: HTTPValidationError FileScanRead: properties: id: type: string format: uuid title: Id description: Use this to fetch the file or match a webhook. status: type: string title: Status description: >- 'pending' (no verdict yet), 'clean', 'infected', 'unscannable' (we could not scan it -- which is not the same as safe), or 'error'. file_name: type: string title: File Name content_type: anyOf: - type: string - type: 'null' title: Content Type description: >- The type derived from the bytes where we could identify them, which is not necessarily the type that was declared on upload. declared_content_type: anyOf: - type: string - type: 'null' title: Declared Content Type description: What the uploader said it was. size_bytes: anyOf: - type: integer - type: 'null' title: Size Bytes category: anyOf: - type: string - type: 'null' title: Category description: The label supplied at upload, for your own grouping. created_at: type: string format: date-time title: Created At scanned_at: anyOf: - type: string format: date-time - type: 'null' title: Scanned At description: Null until a verdict lands. download_url: anyOf: - type: string - type: 'null' title: Download Url description: >- Short-lived download link. Present ONLY on a clean file and only on the single-file read -- never on the list, and never in a webhook. expires_in: anyOf: - type: integer - type: 'null' title: Expires In description: Seconds until ``download_url`` stops working. type: object required: - id - status - file_name - created_at title: FileScanRead description: One submitted file and its scan verdict. ValidationError: properties: loc: items: anyOf: - type: string - type: integer type: array title: Location msg: type: string title: Message type: type: string title: Error Type type: object required: - loc - msg - type title: ValidationError securitySchemes: _AuthenticatedBearer: type: oauth2 flows: password: scopes: {} tokenUrl: /v1/platform/auth/token ````