`get_me_certificates_by_id_download`

Read-only

Calls GET /api/me/certificates/{id}/download as the signed-in person · REST reference

Mint a short-lived download URL for one of the donor's certificate PDFs

OWNERSHIP IS CHECKED BEFORE PRESIGNING: the certificate must appear in this donor's own list, resolved from the token's identity, so the id alone is not authority to fetch a PDF. The URL is presigned for 5 minutes at click time rather than handed out with the list — the list never carries a fetchable location at all. The 404 covers both "not this donor's certificate" and "this certificate has no PDF", deliberately not distinguishing them.

Arguments

Argument	Type		Description
`id`path	string (uuid)	required	Certificate id, as returned by GET /api/me/certificates.

Example call

A client sends this over the MCP session; Claude and other agents build it for you. The values are placeholders — the shape is real.

json

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "get_me_certificates_by_id_download",
    "arguments": {
      "id": "11111111-1111-4111-8111-111111111111"
    }
  }
}

Result

On success (HTTP 200) the tool returns one text item holding the API's JSON, pretty-printed.

A presigned URL, valid for 300 seconds.

json

{
  "url": "https://example.org"
}

Fields

Field	Type	Description
`url`	string (uri)

When it fails

A failed call returns isError: true with the API's message as text.

404: Not this donor's certificate, or it has no rendered PDF.

What the model is shown

This is the tool exactly as the server lists it in tools/list. The description starts with the REST call it makes.

json

{
  "name": "get_me_certificates_by_id_download",
  "description": "GET /api/me/certificates/{id}/download — OWNERSHIP IS CHECKED BEFORE PRESIGNING: the certificate must appear in this donor's own list, resolved from the token's identity, so the id alone is not authority to fetch a PDF. The URL is presigned for 5 minutes at click time rather than handed out with the list — the list never carries a fetchable location at all. The 404 covers both \"not this donor's certificate\" and \"this certificate has no PDF\", deliberately not distinguishing them.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "id": {
        "type": "string",
        "description": "Certificate id, as returned by GET /api/me/certificates."
      }
    },
    "required": [
      "id"
    ]
  },
  "annotations": {
    "readOnlyHint": true,
    "openWorldHint": false
  }
}