---
title: "Upload Photo"
method: POST
path: "/api/v1/sites/{site_id}/photos"
---

# Upload Photo

`POST /api/v1/sites/{site_id}/photos`

## Request

- Base URL: `https://trovastorage.it` (the document declares no server; this is the origin it was published from)
- URL: `https://trovastorage.it/api/v1/sites/{site_id}/photos`
- Auth: one of:
  - API key in header `X-Access-Token`
  - HTTP bearer

## Path parameters

- `site_id` string, uuid, required

## Response `201`

Successful Response

- PhotoRef: `url` is a path, not an absolute URL: the backend does not know its own public origin. The SPA prefixes it with the API base it already configures.
  - `id` string, uuid, required
  - `url` string, required
  - `position` integer, required
  - `draft` boolean

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/trovastorage/apis/stock-your-inventory.md) · [All operations](https://skmtc.dev/trovastorage/apis/stock-your-inventory/llms.txt) · [OpenAPI document](https://skmtc.dev/trovastorage/apis/stock-your-inventory/revisions/c75f591a585c?raw)
