---
title: "Get person photo"
method: GET
path: "/rest/api/v1/people/{person_id}/photo"
tags: ["Entities"]
---

# Get person photo

`GET /rest/api/v1/people/{person_id}/photo`

## Request

- Base URL: `https://instance-name-be.glean.com`
- URL: `https://instance-name-be.glean.com/rest/api/v1/people/{person_id}/photo`
- Auth: HTTP bearer

Returns the profile photo bytes for a person whose photo is stored in Glean (crawled from an identity source or user-uploaded via admin console). Photos hosted externally (e.g. Slack CDN) are not served by this endpoint; callers should follow the photoUrl from /people or /listentities directly. Responses include a Cache-Control header (max-age=3600) to reduce redundant fetches.

## Path parameters

- `person_id` string, required

## Query parameters

- `ds` string

## Response `200`

Photo bytes returned successfully.

## Other responses

- `400`: Missing person_id parameter.
- `401`: Not Authorized.
- `404`: Person not found, person has no photo, or photo is not hosted by Glean (follow photoUrl from /people or /listentities directly).
- `429`: Too Many Requests.

## Changes

- **2026-07-22** `12f321ae935e`: 1 info
  - the endpoint scheme security `APIToken` was added to the API
- **2026-07-22** `90948cb39546`: 1 info
  - the endpoint scheme security `APIToken` was removed from the API
- **2026-07-21** `972a5118199e`: 1 info
  - the endpoint scheme security `APIToken` was added to the API
- **2026-07-21** `2d62172604d1`: 1 info
  - the endpoint scheme security `APIToken` was removed from the API
- **2026-06-22** `08c17c9175d0`: 1 info
  - the endpoint scheme security `APIToken` was added to the API

[Operation history](https://skmtc.dev/gleanwork/apis/glean-api/changes/rest/api/v1/people/:person_id/photo/get.md)

---

[API](https://skmtc.dev/gleanwork/apis/glean-api.md) · [All operations](https://skmtc.dev/gleanwork/apis/glean-api/llms.txt) · [OpenAPI document](https://skmtc.dev/gleanwork/apis/glean-api/revisions/0a14f9aca6c0?raw)