---
title: "Get one asset"
method: GET
path: "/v1/firearms/{id}/media/{selector}"
tags: ["Firearms"]
---

# Get one asset

`GET /v1/firearms/{id}/media/{selector}`

## Request

- Base URL: `https://api.gunspec.io`
- URL: `https://api.gunspec.io/v1/firearms/{id}/media/{selector}`
- Auth: one of:
  - API key in header `X-API-Key`
  - HTTP bearer

Fetch a single asset addressed either by **kind** (`silhouette`, `render`, `photo`, `schematic`, `model`) or by the numeric `id` from the list.

Addressing by kind means no prior lookup: `GET /v1/firearms/ak-47/media/silhouette` returns the SVG in one request.

`format=raw` (default) streams the bytes, `format=datauri` returns JSON with a base64 data URI capped at 256KB, and `format=json` returns the metadata envelope without moving any bytes. Assets we link rather than host answer with a 302.

**Requires Builder tier or higher.**

## Path parameters

- `id` string, required
- `selector` union, required
  - 'silhouette' | 'render' | 'photo' | 'schematic' | 'model'
  - string

## Query parameters

- `format` 'raw' | 'datauri' | 'json'
- `size` 'full' | 'display' | 'thumb'
- `stroke_width` integer
- `stroke_color` string

## Response `200`

The asset bytes when `format=raw` (the default), or the JSON envelope when `format` is `datauri` or `json`

- object
  - `success` boolean, required: Always true on a successful response. Every error carries `false` and an `error` object instead.
  - `data` MediaItem, required: One asset belonging to a firearm. Every kind, whether silhouette, render, photo, schematic or 3D model, is returned in this same shape, and `url` is always absolute and directly fetchable.
    - `id` integer, nullable: Null for assets stored as a column rather than a row (the 3D model).
    - `kind` 'silhouette' | 'render' | 'photo' | 'schematic' | 'model' | 'feature_icon', required: What kind of asset a media listing item is: a stored kind, or `feature_icon`, the drawn icon for one of the firearm's features.
    - `feature` string: On a `feature_icon` only: the tag in the firearm's `features` this drawing illustrates, exactly as the record carries it.
    - `mimeType` string, nullable: Media type of the bytes, e.g. `image/png`.
    - `width` integer, nullable: Pixel width, where it is known.
    - `height` integer, nullable: Pixel height, where it is known.
    - `alt` string, nullable: Alt text, where one has been written. Null otherwise, so do not render an empty string.
    - `url` string, required: Absolute, directly fetchable URL.
    - `sizes` object: Per-size URLs. Absent on assets we link rather than host.
      - `full` string: URL of the asset at full size.
      - `display` string: URL of the mid-size rendition, for a detail page.
      - `thumb` string: URL of the thumbnail rendition, for a list or grid.
    - `credit` object, required: Attribution required to reuse the asset. Populated wherever the catalogue records it.
      - `source` string, nullable: Where the record came from: a curated entry, an inference, or an import.
      - `author` string, nullable: Who made the asset, where it is credited.
      - `sourceUrl` string, nullable: Page the asset or document was taken from.
      - `license` string, nullable: Licence the asset is held under, where one is recorded.

## Other responses

- `302`: The asset is hosted elsewhere; follow `Location`.
- `400`: Validation error
- `401`: Missing or invalid API key
- `403`: The credential is valid and the caller is not permitted. Three causes, none of which reissuing a key changes: the plan is below the endpoint's tier, the account is suspended, or the key is not attached to the thing being acted on, meaning a user account for `/v1/me` or a shop for `/v1/vendor`. Distinct from 401, which means the credential is missing, malformed or expired and a new one can work.
- `404`: Resource not found
- `429`: A limit was reached. `RATE_LIMITED` is the per-minute limit: wait `Retry-After` seconds (a minute) and retry. `DAILY_CAP_EXCEEDED` is the plan's daily limit, per key: nothing will be served until the counters return to zero at midnight UTC. `MONTHLY_CAP_EXCEEDED` is the plan's monthly allowance, for the whole account: nothing will be served until midnight UTC on the first of next month, or until the plan changes. For both, `Retry-After` is the seconds until then and `error.resetsAt` says when as an instant. Calls made after a refusal are refused too and do not spend the month, and a free key that keeps calling is paused, so stop at the first one and resume at the reset.
- `500`: Internal server error

---

[API](https://skmtc.dev/gunspec/apis/gunspec-io-api.md) · [All operations](https://skmtc.dev/gunspec/apis/gunspec-io-api/llms.txt) · [OpenAPI document](https://skmtc.dev/gunspec/apis/gunspec-io-api/revisions/f2e974d8b05c?raw)