# Download an object

> The whole file, decrypted.

`GET https://api.codebuckets.clatterlabs.xyz/v1/buckets/{bucket_id}/objects/{object_id}/content` (key permission: `buckets:read`)

Streams the original file back, decrypted, with `Content-Disposition: attachment`. Objects over 1 GB download chunk by chunk with [Download a chunk](/api-reference/code-buckets/objects/chunk).

## Authorizations

- `Authorization` (string, required): Your API key as a bearer token: `Bearer clsk_...`. Create keys in the [Console](https://console.clatterlabs.com/api-keys) with the Code Buckets permissions you need.
- `X-Clatter-Account` (string, required): The Account ID that owns the key, like `CL-7K2M9QXA`. Find it in Console › Settings. A missing value answers `401 missing_account_id`; someone else's answers `401 account_mismatch`.

## Path parameters

- `bucket_id` (string, required): The bucket id (`cbk_…`).
- `object_id` (string, required): The object id (`cbo_…`).

## Response

- `(body)` (binary): The file's bytes, `Content-Length` set.

## Example request

```bash
curl "https://api.codebuckets.clatterlabs.xyz/v1/buckets/cbk_q7c1r9t2y6u0i3o8p5a4/objects/cbo_m2n8b4v6c1x9z3l7k5j0/content" \
  -H "Authorization: Bearer $CLATTER_API_KEY" \
  -H "X-Clatter-Account: $CLATTER_ACCOUNT_ID" \
  -o storefront.zip
```

## Errors

| Status | Code | When |
| --- | --- | --- |
| `401` | `invalid_api_key / missing_account_id / account_mismatch` | The key or Account ID is wrong. |
| `402` | `quota_exceeded` | This month's free tokens are used up. |
| `403` | `insufficient_scope` | The key lacks the permission. |
| `404` | `not_found` | No object with that id on your account. |
| `409` | `not_ready` | The upload isn't complete. |
| `413` | `use_chunks` | Over 1 GB: download chunks; `error.chunk_count` tells you how many. |