Retune Download Link

Change when a persistent download link expires. Use it to extend a link a colleague still needs, or to pull one in early without killing it outright.

Only persistent links can be retuned — short-lived requests leave nothing to manage. Both directions are allowed: the new deadline may be later or earlier than the current one, capped at 180 days from now.

A link that has already been revoked or has already expired cannot be brought back. Mint a fresh one instead.

A dashboard_url keeps the expiry it was minted with. Shortening the link closes it early; to share the dashboard for longer, mint a new link.

Use cases

Extend a link an auditor or customer is still working through.
Shorten a link that turned out to be broader than intended, without breaking an in-progress download.
Push a deadline out after confirming a recipient still needs access.

Path parameters

Param	Type	Description
`id`	uuid	Artifact ID. Must be visible to your organization.
`token`	string	The token from the link's URL — the segment after `/redirect/`. Returned only when the link was minted.

Request body

Supply exactly one of the two fields. Sending both, or neither, is rejected.

Field	Type	Required	Description
`expires_at`	ISO 8601	one of	New absolute expiry, and the preferred form. Must be in the future and no more than 180 days out.
`ttl_seconds`	int	one of	New lifetime in seconds, measured from now. Between 1 and 15 552 000 (180 days).

Response schema (`data`)

Field	Type	Description
`type`	`"artifact_download_link"`	Always `"artifact_download_link"`.
`id`	uuid	Download link ID. Distinct from the token, and safe to log.

`attributes`

Field	Type	Description
`artifact_id`	uuid	Artifact this link resolves to.
`expires_at`	ISO 8601	The new absolute expiry.
`revoked_at`	ISO 8601 \| null	Always `null` here — a revoked link cannot be retuned.
`last_accessed_at`	ISO 8601 \| null	Last successful download, or `null` if never used.
`access_count`	int	Successful downloads recorded against this link.
`created_at`	ISO 8601	When the link was minted.

The token is never echoed back. Epoch stores only a hash of it, so no response can return it. Responses identify the link by id.

Status codes

200 — Success. The link now expires at the new deadline.
400 — Invalid id; both or neither lifetime field supplied; or expires_at in the past or more than 180 days out.
401 — Missing or invalid API key.
403 — Caller lacks the artifacts:write scope.
404 — Unknown token, the token belongs to a different artifact, the artifact is not visible to your organization, or the link is already revoked or expired.

Required scope: artifacts:write