List MED evidence with signed download URLs

curl https://client.api.corpx.com/v1/accounts/accountId/pix/med/id/evidence/download \
     -H "X-Content-SHA256: X-Content-SHA256" \
     -H "X-Request-Signature: X-Request-Signature" \
     -H "X-Request-Timestamp: X-Request-Timestamp" \
     -H "X-Tenant-Id: X-Tenant-Id" \
     -H "Authorization: Bearer <token>"

{
  "medId": "8c1f6a2e-4d3b-4b9a-9f0e-1a2b3c4d5e6f",
  "items": [
    {
      "evidenceId": "8c1f6a2e-4d3b-4b9a-9f0e-1a2b3c4d5e6f",
      "filename": "MARIA DA SILVA",
      "contentType": "PIX",
      "sizeBytes": 50,
      "uploadedAt": "2026-02-20T08:33:39Z",
      "uploadedBy": "maria.silva@example.com",
      "scanStatus": "PENDING",
      "scanReason": "Pagamento pedido #12345",
      "downloadUrl": "https://example.com/webhooks/corpx"
    }
  ],
  "count": 3
}

Returns the files attached to the dispute, each with a short-lived signed downloadUrl when it cleared the security scan. Pass ?evidenceId= to get a single one.

Authentication

AuthorizationBearer

Bearer authentication of the form Bearer <token>, where token is your auth token.

Path parameters

accountIdstringRequired

Account identifier.

idstringRequired

MED dispute identifier as returned by GET /v1/accounts/{accountId}/pix/med.

Headers

X-Content-SHA256stringRequired

Lowercase hex SHA-256 of the body. An empty body hashes the empty string, so the header is always present. Mismatch returns 400 body_hash_mismatch.

Query parameters

evidenceIdstringOptional

Restricts the response to a single evidence file.

Response

Evidence listed.

medIdstring

itemslist of objects

countinteger

Errors

404

Not Found Error