Generate images with GetAPI.ONE

Prepare a supported request

• Open the current catalog and select a model whose declared endpoint is image generation.
• Review live pricing before a billable call; this guide does not freeze a price.
• Start with one output and only fields shown for that model’s contract.

POST https://www.getapi.one/v1/images/generations

Send a minimal generation

1. Set GETAPI_ONE_API_KEY in a trusted process environment.
2. Copy the exact image model ID from the current catalog.
3. Describe the subject, composition, and constraints in the prompt.
4. Submit one result first, then expand optional fields only after confirming model support.
5. Decode bounded base64 output locally. If the response contains a URL, record it for an approved downloader with explicit egress/host rules and redirect revalidation instead of dereferencing it in the API process.

curl --fail-with-body https://www.getapi.one/v1/images/generations \
  -H "Authorization: Bearer $GETAPI_ONE_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "model": "<IMAGE_MODEL_ID_FROM_CURRENT_CATALOG>",
    "prompt": "A clean product diagram of a secure server-side API flow",
    "n": 1
  }' > image-response.json

import base64
import json
from pathlib import Path
from urllib.parse import urlsplit

payload = json.loads(Path("image-response.json").read_text(encoding="utf-8"))
item = payload["data"][0]

if item.get("b64_json"):
    image_bytes = base64.b64decode(item["b64_json"], validate=True)
    if len(image_bytes) > 25 * 1024 * 1024:
        raise ValueError("Image exceeds the local 25 MB safety limit")
    Path("generated-image.bin").write_bytes(image_bytes)
elif item.get("url"):
    url = item["url"]
    parsed = urlsplit(url)
    if parsed.scheme != "https" or not parsed.hostname:
        raise ValueError("Refusing an invalid or non-HTTPS image URL")
    # Do not dereference provider-controlled URLs from a generic server example.
    # Give this record to an approved downloader that enforces your egress and
    # host policy, rejects private/link-local/loopback destinations, revalidates
    # every redirect, sends no ONE credential, and bounds the response bytes.
    Path("generated-image-url.txt").write_text(url, encoding="utf-8")
    print("URL recorded for an egress-controlled downloader")
else:
    raise ValueError("Expected data[0].url or data[0].b64_json")

Evaluate the result

Verify the expected result

• The HTTP request succeeds and the body contains the image result shape your selected model returns.
• A decoded base64 file opens as the expected image type, or a URL result is recorded and then retrieved only by your approved egress-controlled downloader.
• The ONE console records the request or corresponding usage.

Fix image request errors

Store inputs and outputs safely

• Keep keys server-side and validate prompt length, output count, and optional fields before forwarding.
• Do not send confidential source images or personal data unless your approved data handling allows it.
• Treat returned URLs as temporary unless the provider contract explicitly says otherwise; copy approved output to controlled storage.
• Never forward the GetAPI.ONE Authorization header to a returned image URL.
• Treat returned URLs as untrusted input: enforce an explicit egress and host policy, block private/link-local/loopback destinations, and revalidate every redirect in the dedicated downloader.

Next steps

• Compare task fit
• Build an asynchronous video workflow