> This page is for API, version 2026-01-01 (Stable) (default). > For other versions, use one of these documentation indexes: > - 2026-01-01 (Stable) (default): https://developer.deel.com/api/stable/llms.txt > For clean Markdown of any page, append .md to the page URL. > For a complete documentation index, see https://developer.deel.com/llms.txt. > For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://developer.deel.com/_mcp/server. # Get a download URL for one compliance document of a worker contract GET https://api.letsdeel.com/rest/workers/contracts/{contract_id}/compliance-documents/{document_id}/download Returns a short-lived URL for the file submitted against a compliance document of one of the authenticated worker Global Payroll contracts. The URL is valid for about 15 minutes: fetch the file with it rather than storing the URL. Pass `file` to pick a specific file when several were submitted; the first file is returned by default. Documents in the `PASSPORT_OR_NATIONAL_ID` category are never downloadable through this API, for any token type. Only Global Payroll contracts are supported. **Token scopes**: `worker:read` Reference: https://developer.deel.com/api/reference/endpoints/workers/download-worker-contract-compliance-document-v-2026-08-25 ## Authentication - `Authorization` header (bearer token, required) — ## Authentication The Deel API uses bearer tokens to authenticate requests. All API calls must be made over HTTPS — calls over plain HTTP or without authentication will fail. ```curl curl -X GET 'https://api.letsdeel.com/rest/v2/contracts' \ -H 'Authorization: Bearer YOUR-TOKEN-HERE' ``` [Learn more about authentication](/api/authentication) - `Authorization` header (bearer token, required) — Standard OAuth2 security scheme based on https://swagger.io/docs/specification/authentication/ ## Servers - `https://api.letsdeel.com/rest` (Production, default) - `https://api-staging.letsdeel.com/rest` (Demo) ## Request ### Path parameters - `contract_id` (string, required) — Public id of the Global Payroll contract the documents belong to. - `document_id` (string, required) — Public UUID of the compliance document requirement, as returned in `id` by the list endpoint. ### Query parameters - `file` (integer, optional, default: 0) — Zero-based index of the submitted file to download. Defaults to the first file. ## Response ### 200 Download URL returned successfully. - `data` (WorkersContractsContractIdComplianceDocumentsDocumentIdDownloadGetResponsesContentApplicationJsonSchemaData, required) ## Errors ### 400 Bad Request Error Bad request — invalid or missing parameters. - `errors` (list of WorkersContractsContractIdComplianceDocumentsDocumentIdDownloadGetResponsesContentApplicationJsonSchemaErrorsItems, required) — Errors that occurred while processing the request. ### 401 Unauthorized Error Unauthorized — the access token is missing, expired or invalid. - `errors` (list of WorkersContractsContractIdComplianceDocumentsDocumentIdDownloadGetResponsesContentApplicationJsonSchemaErrorsItems, required) — Errors that occurred while processing the request. ### 403 Forbidden Error Forbidden — the document is in the `PASSPORT_OR_NATIONAL_ID` category, the worker does not hold this contract, or the token lacks the required scope. - `errors` (list of WorkersContractsContractIdComplianceDocumentsDocumentIdDownloadGetResponsesContentApplicationJsonSchemaErrorsItems, required) — Errors that occurred while processing the request. ### 404 Not Found Error Not found — `document_id` is not part of the contract. - `errors` (list of WorkersContractsContractIdComplianceDocumentsDocumentIdDownloadGetResponsesContentApplicationJsonSchemaErrorsItems, required) — Errors that occurred while processing the request. ### 412 Precondition Failed Error Nothing is submitted against this requirement, or the requested `file` index is beyond the submitted files. - `any` ### 422 Unprocessable Entity Error Unprocessable entity — the contract is not a Global Payroll contract, so compliance documents are not available on this endpoint. The error code is `WORKER_TYPE_NOT_SUPPORTED`. - `errors` (list of WorkersContractsContractIdComplianceDocumentsDocumentIdDownloadGetResponsesContentApplicationJsonSchemaErrorsItems, required) — Errors that occurred while processing the request. ### 500 Internal Server Error Operation failed. - `request` (ApiErrorRequest, optional) - `errors` (list of ApiError, optional) ## Types ### WorkersContractsContractIdComplianceDocumentsDocumentIdDownloadGetResponsesContentApplicationJsonSchemaData - `url` (string, required) — Time-limited download URL, valid for about 15 minutes. Fetch it rather than storing it. - `expires_at` (string, required, nullable) — When the URL stops working. Null when the URL is not time-limited. - `updated_at` (string, optional, nullable) — Reserved. Not populated on this endpoint today. - `is_external_url` (boolean, optional, nullable) — Reserved. Not populated on this endpoint today. ### WorkersContractsContractIdComplianceDocumentsDocumentIdDownloadGetResponsesContentApplicationJsonSchemaErrorsItems - `code` (string, required) — Machine-readable error code. - `message` (string, required) — Human-readable explanation. - `field` (string, optional, nullable) — Field that caused the error, when the error is about one. ### ApiErrorRequest - `method` (string, optional) — The HTTP method of the failed request - `url` (string, optional) — The relative URL of the failed request - `status` (double, optional) — The status code of the response - `api_req_id` (string, optional) — The request ID of the failed request - `docs` (string, optional) — A link to the official documentation for the requested endpoint resource - `source` (string, optional) — The source handler which produced the returned error - `code` (double, optional) — The code of the source handler which produced the returned error ### ApiError - `message` (string, optional) — A description of the returned error - `path` (string, optional) — The JSON path where input validation failed ## Examples **Response** ```json { "data": { "url": "https://files.example.com/passport_scan.pdf?token=abc123", "expires_at": "2026-01-05T14:45:00.000Z" } } ``` **SDK Code** ```python Workers_downloadWorkerContractComplianceDocument-v2026-08-25_example import requests url = "https://api.letsdeel.com/rest/workers/contracts/37nex2x/compliance-documents/c106a26a-21bb-5538-8bf2-57095d1976c1/download" querystring = {"file":"0"} headers = {"Authorization": "Bearer "} response = requests.get(url, headers=headers, params=querystring) print(response.json()) ``` ```javascript Workers_downloadWorkerContractComplianceDocument-v2026-08-25_example const url = 'https://api.letsdeel.com/rest/workers/contracts/37nex2x/compliance-documents/c106a26a-21bb-5538-8bf2-57095d1976c1/download?file=0'; const options = {method: 'GET', headers: {Authorization: 'Bearer '}}; try { const response = await fetch(url, options); const data = await response.json(); console.log(data); } catch (error) { console.error(error); } ``` ```go Workers_downloadWorkerContractComplianceDocument-v2026-08-25_example package main import ( "fmt" "net/http" "io" ) func main() { url := "https://api.letsdeel.com/rest/workers/contracts/37nex2x/compliance-documents/c106a26a-21bb-5538-8bf2-57095d1976c1/download?file=0" req, _ := http.NewRequest("GET", url, nil) req.Header.Add("Authorization", "Bearer ") res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := io.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) } ``` ```ruby Workers_downloadWorkerContractComplianceDocument-v2026-08-25_example require 'uri' require 'net/http' url = URI("https://api.letsdeel.com/rest/workers/contracts/37nex2x/compliance-documents/c106a26a-21bb-5538-8bf2-57095d1976c1/download?file=0") http = Net::HTTP.new(url.host, url.port) http.use_ssl = true request = Net::HTTP::Get.new(url) request["Authorization"] = 'Bearer ' response = http.request(request) puts response.read_body ``` ```java Workers_downloadWorkerContractComplianceDocument-v2026-08-25_example import com.mashape.unirest.http.HttpResponse; import com.mashape.unirest.http.Unirest; HttpResponse response = Unirest.get("https://api.letsdeel.com/rest/workers/contracts/37nex2x/compliance-documents/c106a26a-21bb-5538-8bf2-57095d1976c1/download?file=0") .header("Authorization", "Bearer ") .asString(); ``` ```php Workers_downloadWorkerContractComplianceDocument-v2026-08-25_example request('GET', 'https://api.letsdeel.com/rest/workers/contracts/37nex2x/compliance-documents/c106a26a-21bb-5538-8bf2-57095d1976c1/download?file=0', [ 'headers' => [ 'Authorization' => 'Bearer ', ], ]); echo $response->getBody(); ``` ```csharp Workers_downloadWorkerContractComplianceDocument-v2026-08-25_example using RestSharp; var client = new RestClient("https://api.letsdeel.com/rest/workers/contracts/37nex2x/compliance-documents/c106a26a-21bb-5538-8bf2-57095d1976c1/download?file=0"); var request = new RestRequest(Method.GET); request.AddHeader("Authorization", "Bearer "); IRestResponse response = client.Execute(request); ``` ```swift Workers_downloadWorkerContractComplianceDocument-v2026-08-25_example import Foundation let headers = ["Authorization": "Bearer "] let request = NSMutableURLRequest(url: NSURL(string: "https://api.letsdeel.com/rest/workers/contracts/37nex2x/compliance-documents/c106a26a-21bb-5538-8bf2-57095d1976c1/download?file=0")! as URL, cachePolicy: .useProtocolCachePolicy, timeoutInterval: 10.0) request.httpMethod = "GET" request.allHTTPHeaderFields = headers let session = URLSession.shared let dataTask = session.dataTask(with: request as URLRequest, completionHandler: { (data, response, error) -> Void in if (error != nil) { print(error as Any) } else { let httpResponse = response as? HTTPURLResponse print(httpResponse) } }) dataTask.resume() ```