---
title: "Your uploaded images and fonts"
method: GET
path: "/assets"
---

# Your uploaded images and fonts

`GET /assets`

## Request

- Base URL: `https://rendry.io/api/v1`
- URL: `https://rendry.io/api/v1/assets`
- Auth: one of:
  - HTTP bearer
  - HTTP bearer
  - HTTP bearer
  - HTTP bearer

can_delete says whether THIS caller may delete the file: with an API key or an MCP/OAuth connector token only files created through the API (uploads, background removals, cut-outs) can be removed; the owner signed in on the web may remove any.

## Headers

- `X-Rendry-Account` string

## Response `200`

Assets, newest first

- object[]
  - `id` string, required
  - `user_id` string
  - `file_name` string, required
  - `storage_key` string, required: user_assets/{user}/… — what image layers, /images/* and fonts (font_storage_key) refer to
  - `url` string, required: Path under /api/v1/files/… relative to the API origin. NOT a public link: a user asset is served only to its owner's key or session (GET /files/{path}); the renderer reads it internally, so it works in a layer
  - `content_type` string, required
  - `size` integer, required: Bytes
  - `asset_type` 'image' | 'font', required
  - `font_family` string: Fonts only: the family name to put in a text layer's font
  - `created_via` 'web' | 'api' | 'derived': web: uploaded by a person in the browser; api: uploaded with a key; derived: made by a cutout tool
  - `created_at` string, required
  - `can_delete` boolean: Whether THIS caller may delete the file: a session may delete anything, a key only what was created through the API

## Other responses

- `401`: Missing/invalid API key

---

[API](https://skmtc.dev/rendry/apis/rendry-api.md) · [All operations](https://skmtc.dev/rendry/apis/rendry-api/llms.txt) · [OpenAPI document](https://skmtc.dev/rendry/apis/rendry-api/revisions/c4fb572c26c9?raw)