# Get a published document by slug

Canonical page: https://docs.ovok.com/api/payload-cms-public-delivery/get-a-published-document-by-slug

`GET /v1/public/cms/collections/{collectionSlug}/items/{slug}`

Returns one published document of a CMS collection by its slug. Use it for stable public pages and deep links, such as terms and conditions or a privacy policy.

**Auth:** one of the following, checked in this order:

- The CMS public API key, in the `x-api-key` header, as `Authorization: Bearer <key>`, or as the `apiKey` query parameter.
- No key, for collections configured as keyless (by default `legal-pages` and `translations`).
- A signed-in Ovok session (bearer token), which may only read its own tenant.

**Scope:** the tenant you name, by tenant code (`x-ovok-tenant-code` header or `tenant` query parameter) or by project id (`x-ovok-medplum-project-id` header or `projectId` query parameter). Headers win over query parameters, and a tenant code wins over a project id. If you name neither, a signed-in session reads its own tenant. Each Ovok deployment has one set of content; there is no environment to choose.

## Behaviour

- Any collection except the `users` and `tenants` system collections can be read.
- Only a document with status `published` is returned. The response is the document itself, with the fields its collection defines.
- `slug` must start with a lowercase letter or digit and contain only lowercase letters, digits, `-`, `_` and `.`, up to 128 characters.
- `locale` is a language tag such as `de` or `en-US`. Without it, the CMS default locale is used. Missing translations fall back as configured in the CMS.
- If the tenant has no published document with this slug, Ovok returns the shared tenant's document with that slug, when one exists.
- Responses are cached by Ovok for up to 60 seconds. A request that names a tenant gets `Cache-Control: public, s-maxage=60, stale-while-revalidate=300` and a `Vary` on the tenant and API key headers. A request that names no tenant gets `Cache-Control: no-store`. Error responses carry neither.

## Example

```bash
curl -X GET 'https://api.sandbox.ovok.com/v1/public/cms/collections/legal-pages/items/terms-and-conditions?tenant=my-medical-project&locale=en-US'
```