> ## Documentation Index > Fetch the complete documentation index at: https://docs.closient.com/llms.txt > Use this file to discover all available pages before exploring further. # Get product document > Fetch a single document by ID. 404 if it does not belong to the targeted product. Caller must be a member of ``organization_id``. ## OpenAPI ````yaml /openapi/openapi-dashboard.json get /dashboard/api/v1/trade-items/{organization_id}/{gtin}/documents/{document_id} openapi: 3.1.0 info: title: Brand Dashboard API version: 1.0.0 description: > Endpoints powering the brand dashboard: catalogue completeness, product images, nutrition and document management, brand analytics, data export, and GS1 Company Prefix management + self-service GIAI minting. Every endpoint is scoped to an organization you are a member of — pass an org-scoped API key, or authenticate with a session, and you reach exactly the organizations your account belongs to. This is the same surface the Closient dashboard UI itself uses, so anything you can do in the dashboard you can do here. ## Authentication All endpoints require an API key passed via the `X-API-Key` HTTP header, unless otherwise noted. ``` X-API-Key: csb__ ``` Generate API keys in **Settings > API Keys** in your dashboard, or via the Account API. Session-based (cookie) authentication is also accepted for browser-based access. ## Rate Limits | Tier | Requests / minute | Requests / day | |-------------|-------------------|----------------| | Default | 300 | 10,000 | | Custom | Contact us | Contact us | Rate-limit headers are included on every response so callers can self-throttle without hitting our 429s ("informed governor"): - `RateLimit-Policy` — every active window, e.g. `300;w=60, 10000;w=86400` - `RateLimit-Limit` — quota for the **most-restrictive** currently-active window - `RateLimit-Remaining` — requests left in that window - `RateLimit-Reset` — seconds until that window resets (relative; clock-skew safe) Legacy `X-RateLimit-*` aliases are also emitted for back-compat. `X-RateLimit-Reset` keeps the absolute Unix-timestamp shape to avoid breaking existing consumers. When rate-limited, you receive `429 Too Many Requests` with a `retry_after_seconds` field in the error envelope and a `Retry-After` header. ## Pagination List endpoints return paginated results in this envelope: ```json { "data": [...], "pagination": { "page": 1, "page_size": 25, "total_count": 342, "total_pages": 14, "has_next": true, "has_previous": false } } ``` Use `?page=2&page_size=50` query parameters. Maximum page size is 100. ## Error Responses All errors conform to [RFC 9457 Problem Details](https://www.rfc-editor.org/rfc/rfc9457) with `Content-Type: application/problem+json`: ```json { "type": "https://closient.com/docs/errors/not_found", "title": "Not Found", "status": 404, "detail": "The requested resource was not found.", "error_code": "not_found", "retryable": false, "timestamp": "2026-03-31T12:00:00+00:00" } ``` Common error codes: `unauthorized` (401), `forbidden` (403), `not_found` (404), `validation_error` (422), `rate_limited` (429), `internal_error` (500). termsOfService: https://www.closient.com/terms/ servers: - url: https://www.closient.com security: [] externalDocs: description: Closient Documentation url: https://docs.closient.com paths: /dashboard/api/v1/trade-items/{organization_id}/{gtin}/documents/{document_id}: get: tags: - Documents summary: Get product document description: >- Fetch a single document by ID. 404 if it does not belong to the targeted product. Caller must be a member of ``organization_id``. operationId: apps_dashboard_api_documents_get_document parameters: - in: path name: organization_id schema: description: UUID of the organization that owns the product. format: shortuuid maxLength: 22 minLength: 22 pattern: ^[23456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz]{22}$ title: Organization Id type: string required: true description: UUID of the organization that owns the product. - in: path name: gtin schema: description: >- GTIN-8/12/13/14 of the target product. Normalized to GTIN-14 by zero-padding before lookup. pattern: ^\d{8,14}$ title: Gtin type: string required: true description: >- GTIN-8/12/13/14 of the target product. Normalized to GTIN-14 by zero-padding before lookup. - in: path name: document_id schema: description: >- UUID (or 22-char shortuuid) of the document row. Must belong to the targeted product. title: Document Id type: string required: true description: >- UUID (or 22-char shortuuid) of the document row. Must belong to the targeted product. responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/ProductDocumentOut' '400': description: Bad Request content: application/problem+json: schema: $ref: '#/components/schemas/ErrorOut' '401': description: Unauthorized content: application/problem+json: schema: $ref: '#/components/schemas/ErrorOut' '403': description: Forbidden content: application/problem+json: schema: $ref: '#/components/schemas/ErrorOut' '404': description: Not Found content: application/problem+json: schema: $ref: '#/components/schemas/ErrorOut' '405': description: Method Not Allowed content: application/problem+json: schema: $ref: '#/components/schemas/ErrorOut' '422': description: Unprocessable Content content: application/problem+json: schema: $ref: '#/components/schemas/ErrorOut' '429': description: Too Many Requests content: application/problem+json: schema: $ref: '#/components/schemas/ErrorOut' security: - APIKeyHeaderAuth: [] - OAuthTokenAuth: [] - CookieGatedSessionAuth: [] components: schemas: ProductDocumentOut: description: A single PDF document attached to a product. examples: - created: '2025-07-01T14:00:00Z' description: SDS revision 3 display_title: Safety Data Sheet file_size_bytes: 210433 file_url: https://cdn.closient.com/products/00012345678905/sds.pdf id: keATfB8VP2gSjcnTbsMNQL page_count: 4 thumbnail_url: https://cdn.closient.com/products/00012345678905/sds-thumb.png title: Safety Data Sheet properties: id: description: >- URL-safe 22-character shortuuid encoding of the row's UUID primary key. Stable across the row's lifetime; suitable for sharing in URLs, log lines, and external SDK clients. Accepted on input as either the shortuuid form or the canonical UUID form (``xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx``). format: shortuuid maxLength: 22 minLength: 22 pattern: ^[23456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz]{22}$ title: Id type: string title: description: Caption entered for the document. Empty string when not set. examples: - Safety Data Sheet maxLength: 255 title: Title type: string description: description: Free-text description of the document. Empty string when not set. title: Description type: string display_title: description: >- Best available title: the entered ``title``, else the PDF's embedded title, else the filename. examples: - Safety Data Sheet title: Display Title type: string file_url: anyOf: - type: string - type: 'null' description: >- Absolute URL of the stored PDF. Null only when the underlying file is missing. examples: - https://cdn.closient.com/products/00012345678905/sds.pdf format: uri title: File Url page_count: anyOf: - minimum: 0 type: integer - type: 'null' description: >- Number of pages, extracted asynchronously after upload. Null until the PDF-processing task has run. title: Page Count file_size_bytes: anyOf: - minimum: 0 type: integer - type: 'null' description: Size of the stored file in bytes. Null when not yet computed. title: File Size Bytes thumbnail_url: anyOf: - type: string - type: 'null' description: >- URL of the first-page thumbnail, generated asynchronously. Empty string / null until processing has run. format: uri title: Thumbnail Url created: description: ISO-8601 UTC timestamp of when the document was uploaded. format: date-time title: Created type: string required: - id - title - description - display_title - created title: ProductDocumentOut type: object ErrorOut: description: |- RFC 9457 Problem Details response. All API errors are returned in this format with Content-Type: application/problem+json. examples: - detail: The requested resource was not found. error_code: not_found retryable: false status: 404 timestamp: '2026-03-31T12:00:00+00:00' title: Not Found type: https://closient.com/docs/errors/not_found - detail: Validation error. details: - loc: - body - name msg: Field required type: missing error_code: validation_error retryable: false status: 422 timestamp: '2026-03-31T12:00:00+00:00' title: Validation Error type: https://closient.com/docs/errors/validation_error - detail: Rate limit exceeded. Please try again later. error_code: rate_limited retry_after: 31 retryable: true status: 429 timestamp: '2026-03-31T12:00:00+00:00' title: Rate Limited type: https://closient.com/docs/errors/rate_limited properties: type: description: URI reference identifying the error type. title: Type type: string title: description: Short human-readable summary of the error. title: Title type: string status: description: HTTP status code. title: Status type: integer detail: description: Human-readable explanation of this specific occurrence. title: Detail type: string error_code: description: Machine-readable error code (e.g. not_found, unauthorized). title: Error Code type: string retryable: default: false description: Whether retrying the same request can succeed. title: Retryable type: boolean timestamp: description: ISO 8601 timestamp of when the error occurred. title: Timestamp type: string retry_after: anyOf: - type: integer - type: 'null' description: Seconds to wait before retrying (when applicable). title: Retry After owner_action_required: anyOf: - type: boolean - type: 'null' description: Whether the error requires account owner intervention. title: Owner Action Required details: description: Additional context (validation errors, etc.). title: Details required: - type - title - status - detail - error_code - timestamp title: ErrorOut type: object securitySchemes: APIKeyHeaderAuth: type: apiKey in: header name: X-API-Key OAuthTokenAuth: type: http scheme: bearer CookieGatedSessionAuth: type: apiKey in: cookie name: sessionid ````