> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tryflowy.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Get an asset

> Fetch one asset by id with a fresh signed URL.



## OpenAPI

````yaml api-reference/openapi.json GET /v1/assets/{assetId}
openapi: 3.0.3
info:
  title: Flowy App API
  version: 1.3.1
  description: >-
    Run Flowy apps and direct generations programmatically.


    Authenticate with a workspace API key in the `Authorization: Bearer` header.
    A **secret** key (`flowy_…`) is for servers; a **publishable** key
    (`flowy_pk_…`) is browser-safe and only works from its allowlisted domains.
    Every run or generation bills the API key's own workspace credits
    (caller-pays), so a leaked key can never spend another workspace's balance.


    Keys carry **scopes**: `apps:read` (list/inspect apps), `runs:read` (poll
    runs), `runs:write` (start runs), `generations:read` (poll direct
    generations), `generations:write` (start direct generations), `assets:read`
    (list/read workspace assets), and `credits:read` (read the credit balance).
    A request that needs a scope the key doesn't hold returns `403`.


    A published (public) app is runnable by any key; a private app is runnable
    only by a key of its own workspace.
servers:
  - url: https://apis.tryflowy.ai/genstudio-svc-v2/api
    description: Flowy production API
security:
  - ApiKeyAuth: []
tags:
  - name: Apps
    description: Discover apps and inspect their input/output schema.
  - name: Runs
    description: Start runs and poll for their results.
  - name: Generations
    description: Start direct image/video generations and poll for their results.
  - name: Assets
    description: Browse the workspace's asset library (uploads + generated media).
  - name: Credits
    description: Read the workspace's credit balance.
  - name: Spec
    description: The machine-readable OpenAPI document.
paths:
  /v1/assets/{assetId}:
    get:
      tags:
        - Assets
      summary: Get an asset
      description: >-
        Returns one workspace asset with a signed download URL. Only assets of
        your own workspace are visible. **Requires the `assets:read` scope.**
      operationId: getAsset
      parameters:
        - name: assetId
          in: path
          required: true
          schema:
            type: string
          example: 64c3f2a1e8b9c0d1f2e3a4b5
        - name: workspace_id
          in: query
          required: false
          schema:
            type: string
          description: >-
            Optional workspace context (from GET /v1/workspaces); default is the
            key's own wallet.
      responses:
        '200':
          description: The asset.
          headers:
            X-RateLimit-Limit:
              $ref: '#/components/headers/X-RateLimit-Limit'
            X-RateLimit-Remaining:
              $ref: '#/components/headers/X-RateLimit-Remaining'
            X-RateLimit-Reset:
              $ref: '#/components/headers/X-RateLimit-Reset'
          content:
            application/json:
              schema:
                type: object
                properties:
                  data:
                    $ref: '#/components/schemas/Asset'
        '401':
          description: Invalid or missing API key
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: The key lacks the assets:read scope
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '404':
          description: Asset not found (or belongs to another workspace)
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
components:
  headers:
    X-RateLimit-Limit:
      description: Maximum requests allowed in the current window (per minute).
      schema:
        type: integer
        example: 60
    X-RateLimit-Remaining:
      description: Requests remaining in the current window.
      schema:
        type: integer
        example: 59
    X-RateLimit-Reset:
      description: Unix epoch second at which the current window resets.
      schema:
        type: integer
        example: 1893456000
  schemas:
    Asset:
      type: object
      properties:
        id:
          type: string
          example: 64c3f2a1e8b9c0d1f2e3a4b5
        fileName:
          type: string
          example: mug.png
        mediaType:
          type: string
          enum:
            - image
            - video
            - audio
            - flam
          example: image
        url:
          type: string
          description: Signed, downloadable media URL — expires.
          example: https://cdn.tryflowy.ai/assets/mug.png
        width:
          type: integer
          example: 1024
        height:
          type: integer
          example: 1024
        durationSeconds:
          type: number
          example: 5
        sizeBytes:
          type: integer
          example: 524288
        source:
          type: string
          enum:
            - upload
            - generated
          example: generated
        prompt:
          type: string
          description: The generation prompt, for generated assets.
        createdAt:
          type: string
          format: date-time
          example: '2026-01-01T00:00:00Z'
    Error:
      type: object
      properties:
        error:
          type: string
          example: this API key lacks the runs:write scope
      required:
        - error
  securitySchemes:
    ApiKeyAuth:
      type: http
      scheme: bearer
      bearerFormat: flowy_*
      description: >-
        A workspace API key. Secret keys (`flowy_…`) are server-side — keep them
        private. Publishable keys (`flowy_pk_…`) are browser-safe but only work
        from their allowlisted domains.

````