Raw PDF bytes, not JSON — an accounting system files this. Proxied through us rather than linked directly, so ownership is checked before anything is served.
The PDF BYTES, Content-Type: application/pdf. Proxied through the API so your key is what authorises it. Sandbox PDFs are generated in code with no accounting system involved, and are stamped NOT A FISCAL DOCUMENT.
Example
"<binary: application/pdf>"
Failures use the shared error envelope — a machine-readable code and a request_id to quote to support. Error handling.
curl -X GET "https://sandbox-api.biklo.com/v1/invoices/0524/pdf?series=RO_BK_COM" \
-H "Authorization: Bearer bk_test_YOUR_KEY"
using System.Net.Http;
using System.Net.Http.Headers;
var client = new HttpClient();
client.DefaultRequestHeaders.Authorization =
new AuthenticationHeaderValue("Bearer", "bk_test_YOUR_KEY");
var request = new HttpRequestMessage(
new HttpMethod("GET"),
"https://sandbox-api.biklo.com/v1/invoices/0524/pdf?series=RO_BK_COM");
var response = await client.SendAsync(request);
var json = await response.Content.ReadAsStringAsync();