You can download media you previously uploaded with /media/input or media that was generated through another API call. The temporary storage should allow you to read and write to the media:// locations for a period of at least 24 hours before it is removed.
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
The url should be in the form media://object-key where the object-key can be any alpha-numeric string. The object-key is unique to your account API token so there is no risk of collision with other users.
255