Manager Cloud 26.9.1.0: API2 attachment download and empty list response

Uncategorized
1

We are building a read-only, company-scoped integration and need to retrieve existing attachment files without using a user’s browser session or cookies.

On Manager Cloud version 26.9.1.0 we observed:

  1. A newly issued business access token successfully reads journal entries using X-API-KEY: HTTP 200, JSON.
  2. GET /api2/attachments?pageSize=1 returns HTTP 200 with Content-Type: application/json but a zero-byte body. Explicit Accept: application/json gives the same result. The business UI has attachments, so we cannot treat this as an empty collection.
  3. GET /api2/attachment-form/{key} for a UUID obtained from the UI returns HTTP 200 and JSON containing Date, Name, Size, Object, Sha256, Key, and id.
  4. Requesting a known working UI /view-attachment?... link using only X-API-KEY, without browser cookies, returns HTTP 302 to / on the same regional host. No file bytes are returned.
  5. The installation’s OpenAPI document lists /attachments and /attachment-form/{key} but we did not identify a binary download path.

Could you please confirm:

  • What supported endpoint and authentication mechanism retrieve the actual attachment bytes through API2? [Moderator removed soliciting of service because it is against the guidelines].
  • Is the zero-byte response from the list endpoint a known issue in this version, or are additional parameters required? What is the supported pagination and response schema?
  • Does Object identify the parent record? How can clients reliably resolve its record type and associate it with the exact journal entry?
  • What format does Sha256 use, and does it represent the original file bytes?
  • If binary download is unsupported, is there a supported export mechanism preserving attachment UUIDs, parent associations, filenames and hashes?

No access token, business database, attachment content or customer identifier is included in this request. [Moderator removed offer of service as against the guidelines.]