---
title: "One person's picture, to someone who shares a firm with them"
method: GET
path: "/v1/avatars/{user_id}"
tags: ["me"]
---

# One person's picture, to someone who shares a firm with them

`GET /v1/avatars/{user_id}`

## Request

- Base URL: `https://api.sixminute.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.sixminute.ai/v1/avatars/{user_id}`
- Auth: HTTP bearer

The bytes under the type they were stored as. A person with no picture, and a person who is not a member of the caller's firm, are both a 404. `v` is the picture's `avatar.updated_at` as the rows that name the person carry it: with it the answer may be kept for a year, without it it is revalidated.

## Path parameters

- `user_id` string, required

## Query parameters

- `v` string

## Response `200`

The picture.

## Other responses

- `400`: The body, query or path did not validate; `errors` lists the fields.
- `401`: No bearer token, or one that does not verify or has expired.
- `403`: The token verified but may not do this: no organisation, not provisioned, wrong role, or a device problem.
- `404`: No such row for this tenant.

---

[API](https://skmtc.dev/sixminute/apis/sixminute-api.md) - [All operations](https://skmtc.dev/sixminute/apis/sixminute-api/llms.txt) - [OpenAPI document](https://skmtc.dev/sixminute/apis/sixminute-api/revisions/605577eadc10?raw)