---
title: "Serve Image Route"
method: GET
path: "/i/{token_ext}"
---

# Serve Image Route

`GET /i/{token_ext}`

## Request

- Base URL: `https://api.goodeye.dev/v1`
- URL: `https://api.goodeye.dev/v1/i/{token_ext}`
- Auth: none declared

Display a hosted image from its serving link.

The URL segment after ``/i/`` is parsed as ``{token}.{ext}``; the
extension is cosmetic and is never used to derive the Content-Type.
The token (everything before the first dot) identifies the image row.

Visibility rules:
- ``public``: served to any caller, including anonymous. A malformed or
  stale Authorization header does not block a public image; it is treated
  as an anonymous request.
- ``private``: requires an authenticated caller who owns the image, OR a
  caller that presents the image's capability secret as the ``k`` query
  parameter (the owner's durable, forwardable view link). Anonymous callers
  with neither receive 401; authenticated non-owners receive 404.

## Path parameters

- `token_ext` string, required

## Query parameters

- `k` string, nullable

## Headers

- `if-none-match` string, nullable

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/goodeye/apis/goodeye-api.md) · [All operations](https://skmtc.dev/goodeye/apis/goodeye-api/llms.txt) · [OpenAPI document](https://skmtc.dev/goodeye/apis/goodeye-api/revisions/547cb8bb6ede?raw)