---
title: "Images for one variant"
method: GET
path: "/variants/{id}/images"
tags: ["variants"]
---

# Images for one variant

`GET /variants/{id}/images`

## Request

- Base URL: `https://api.cars-data.com/v1`
- URL: `https://api.cars-data.com/v1/variants/{id}/images`
- Auth: one of:
  - API key in header `X-Api-Key`
  - HTTP bearer

CDN URLs. Images **are** included in the demo — 40 cars' worth, which is what makes a demo convincing.

## Path parameters

- `id` string, required

## Response `200`

OK

- ImageListEnvelope
  - `data` ImageRef[]
    - `url` string, uri
    - `variant` 'card' | 'hero'
  - `meta` Meta
    - `last_synced_at` string, date-time, required
    - `locale` string
    - `units` 'metric' | 'imperial'

## Other responses

- `401`: No key, or a key we do not know. `WWW-Authenticate: Bearer` on the MCP surface. The MCP server needs no key at all; a REST demo key is one click away. On the two x402 routes a request with no key gets `402` instead, with the price.
- `403`: RFC 9457 problem document.
- `404`: Not found. A token that does not decode gets this too.

---

[API](https://skmtc.dev/cars-data/apis/cars-data-com-api.md) · [All operations](https://skmtc.dev/cars-data/apis/cars-data-com-api/llms.txt) · [OpenAPI document](https://skmtc.dev/cars-data/apis/cars-data-com-api/revisions/4aeb6b2b5c5f?raw)