Private API media

Media endpoints are nested under a project:

https://pagoti.com/api/v1/projects/{project}/media

All requests require Private API authentication. See the authentication guide.

Access requirements

To access project media, the token must:

be valid
be scoped to the requested project
have read access

List media

GET /api/v1/projects/{project}/media

Returns paginated media items for the specified project.

Resource shape

{
  "data": [
    {
      "uuid": "9c76b2aa-0b0d-47fd-a750-212be6c7f8a2",
      "file_name": "hero.png",
      "name": "Hero",
      "src": "https://pagoti.com/storage/...",
      "srcset": "https://pagoti.com/storage/... 320w, https://pagoti.com/storage/... 640w",
      "created_at": "2026-03-31T10:00:00.000000Z",
      "updated_at": "2026-03-31T10:00:00.000000Z"
    }
  ],
  "links": {},
  "meta": {}
}

Example

curl https://pagoti.com/api/v1/projects/abc123de/media \
  -H "Authorization: Bearer YOUR_TOKEN_HERE" \
  -H "Accept: application/json"

Status codes

200 OK when the request succeeds
401 Unauthorized when authentication is missing or invalid
403 Forbidden when the token cannot access the project or lacks read access
404 Not Found when the project hash_id does not exist
429 Too Many Requests when the plan rate limit is exceeded

Notes

media is currently read-only in the private API
results are ordered by updated_at descending