---
title: "Get Photo"
method: GET
path: "/api/v1/photos/{photo_id}"
---

# Get Photo

`GET /api/v1/photos/{photo_id}`

## Request

- Base URL: `https://trovastorage.it` (the document declares no server; this is the origin it was published from)
- URL: `https://trovastorage.it/api/v1/photos/{photo_id}`
- Auth: none declared

Deliberately unauthenticated. The SPA sends its JWT through an axios
interceptor and a plain `<img src>` cannot carry it; blob fetches or query
tokens would be complexity for no gain. The id is an unguessable UUID and the
photos belong to published sites, consistent with the PRD's "address privacy
is a non-goal". Registered as an accepted pilot risk in the implementation
plan's hardening checklist (Section 7).

## Path parameters

- `photo_id` string, uuid, required

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/trovastorage/apis/stock-your-inventory.md) · [All operations](https://skmtc.dev/trovastorage/apis/stock-your-inventory/llms.txt) · [OpenAPI document](https://skmtc.dev/trovastorage/apis/stock-your-inventory/revisions/c75f591a585c?raw)