Download npm package tarball

Follow dist.tarball from the package metadata; filename must be the authorized .tgz filename. Raw API key bearer with skills:read. Unknown/unentitled return 404. Binary response is private and immutable for one year.

Requires every scope: skills:read.

Authentication

AuthorizationBearer

Long-lived sk_live_* or sk_test_* key. Use for token exchange and npm registry only.

Path parameters

packageNamestringRequired

npm package name including scope, URL-encoded as a single segment (for example @kuudo%2Famazon-ads).

filenamestringRequired
filename

Response headers

Cache-ControlstringOptional

private, max-age=31536000, immutable

Response

Package tarball.

Errors

401
Unauthorized Error
404
Not Found Error
503
Service Unavailable Error