Get a presigned download URL
Returns a presigned GET URL for an S3 object. The key must include the bucket as the first path segment (format returned by /s3/list). Access is restricted to the owner’s prefix, super admins, and API-type users. Also accepts the internal-key header (set to INTERNAL_SECRET) for server-to-server calls.
Authorizations
Organisation API key. Format: sk_<secret>/<keyname> — the secret portion, a literal slash, and the human-readable key name. The header exulu-api-key is accepted as an alias. A Bearer prefix is tolerated and stripped. Keys with an agent scope are only valid for the scoped agent instance.
Query Parameters
Full key including bucket prefix (e.g. my-bucket/user_1/file.pdf).