> ## Documentation Index > Fetch the complete documentation index at: https://docs.closient.com/llms.txt > Use this file to discover all available pages before exploring further. # Upload product image > Upload a single image and attach it to the product. Accepts JPEG, PNG, GIF, WebP, SVG, or BMP. When ``is_primary`` is true the previously primary image (if any) is automatically demoted, so at most one image per product carries the flag. Requires the ``organization.contribute_organization`` permission on the membership. ## OpenAPI ````yaml /openapi/openapi-dashboard.json post /dashboard/api/v1/trade-items/{organization_id}/{gtin}/images openapi: 3.1.0 info: title: Brand Dashboard API (Internal) version: 1.0.0 description: > Internal endpoints powering the brand dashboard UI. Not intended for external integrations — use the Products, Brands, and other public APIs instead. ## Authentication All endpoints require an API key passed via the `X-API-Key` HTTP header, unless otherwise noted. ``` X-API-Key: csb__ ``` Generate API keys in **Settings > API Keys** in your dashboard, or via the Account API. Session-based (cookie) authentication is also accepted for browser-based access. ## Rate Limits | Tier | Requests / minute | Requests / day | |-------------|-------------------|----------------| | Default | 300 | 10,000 | | Custom | Contact us | Contact us | Rate-limit headers are included on every response so callers can self-throttle without hitting our 429s ("informed governor"): - `RateLimit-Policy` — every active window, e.g. `300;w=60, 10000;w=86400` - `RateLimit-Limit` — quota for the **most-restrictive** currently-active window - `RateLimit-Remaining` — requests left in that window - `RateLimit-Reset` — seconds until that window resets (relative; clock-skew safe) Legacy `X-RateLimit-*` aliases are also emitted for back-compat. `X-RateLimit-Reset` keeps the absolute Unix-timestamp shape to avoid breaking existing consumers. When rate-limited, you receive `429 Too Many Requests` with a `retry_after_seconds` field in the error envelope and a `Retry-After` header. ## Pagination List endpoints return paginated results in this envelope: ```json { "data": [...], "pagination": { "page": 1, "page_size": 25, "total_count": 342, "total_pages": 14, "has_next": true, "has_previous": false } } ``` Use `?page=2&page_size=50` query parameters. Maximum page size is 100. ## Error Responses All errors conform to [RFC 9457 Problem Details](https://www.rfc-editor.org/rfc/rfc9457) with `Content-Type: application/problem+json`: ```json { "type": "https://closient.com/docs/errors/not_found", "title": "Not Found", "status": 404, "detail": "The requested resource was not found.", "error_code": "not_found", "retryable": false, "timestamp": "2026-03-31T12:00:00+00:00" } ``` Common error codes: `unauthorized` (401), `forbidden` (403), `not_found` (404), `validation_error` (422), `rate_limited` (429), `internal_error` (500). termsOfService: https://www.closient.com/terms/ servers: - url: https://www.closient.com security: [] externalDocs: description: Closient Documentation url: https://docs.closient.com paths: /dashboard/api/v1/trade-items/{organization_id}/{gtin}/images: post: tags: - Images summary: Upload product image description: >- Upload a single image and attach it to the product. Accepts JPEG, PNG, GIF, WebP, SVG, or BMP. When ``is_primary`` is true the previously primary image (if any) is automatically demoted, so at most one image per product carries the flag. Requires the ``organization.contribute_organization`` permission on the membership. operationId: apps_dashboard_api_images_upload_image parameters: - in: path name: organization_id schema: description: UUID of the organization that owns the product. format: shortuuid maxLength: 22 minLength: 22 pattern: ^[23456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz]{22}$ title: Organization Id type: string required: true description: UUID of the organization that owns the product. - in: path name: gtin schema: description: >- GTIN-8/12/13/14 of the target product. Normalized to GTIN-14 by zero-padding before lookup. pattern: ^\d{8,14}$ title: Gtin type: string required: true description: >- GTIN-8/12/13/14 of the target product. Normalized to GTIN-14 by zero-padding before lookup. requestBody: content: multipart/form-data: schema: properties: image: description: Image file to upload (JPEG, PNG, GIF, WebP, SVG, or BMP). format: binary title: Image type: string title: default: '' description: >- Caption / role label for the image (e.g. "Front of package"). Empty string when not specified. maxLength: 255 title: Title type: string is_primary: default: false description: >- When true, this image becomes the product's hero image and the previous primary image is automatically unmarked. Defaults to false. title: Is Primary type: boolean required: - image title: MultiPartBodyParams type: object required: true responses: '201': description: Created content: application/json: schema: $ref: '#/components/schemas/ProductImageOut' security: - APIKeyHeaderAuth: [] - OAuthTokenAuth: [] - SessionAuth: [] components: schemas: ProductImageOut: description: Single image attached to a product. examples: - created: '2025-07-01T14:00:00Z' id: keATfB8VP2gSjcnTbsMNQL image_url: https://cdn.closient.com/products/00012345678905/hero.jpg is_primary: true priority: 0 title: Front of package properties: id: description: >- URL-safe 22-character shortuuid encoding of the row's UUID primary key. Stable across the row's lifetime; suitable for sharing in URLs, log lines, and external SDK clients. Accepted on input as either the shortuuid form or the canonical UUID form (``xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx``). format: shortuuid maxLength: 22 minLength: 22 pattern: ^[23456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz]{22}$ title: Id type: string title: description: >- Caption / role label for the image (e.g. "Front of package", "Nutrition facts"). Empty string when not set. examples: - Front of package maxLength: 255 title: Title type: string is_primary: description: >- True for the single image surfaced as the product's hero. At most one image per product has this set; uploading a new primary unsets the previous one. title: Is Primary type: boolean priority: description: >- Display order within a product's image gallery. Lower numbers appear first; ties break on ``-created``. Primary image always sorts first regardless of priority. minimum: 0 title: Priority type: integer image_url: anyOf: - type: string - type: 'null' description: >- Absolute URL of the original (non-resized) image asset on the configured storage backend. ``null`` only when the underlying ``ImageField`` is empty, which should not occur for persisted rows. examples: - https://cdn.closient.com/products/00012345678905/hero.jpg format: uri title: Image Url created: description: ISO-8601 UTC timestamp of when the image was uploaded. format: date-time title: Created type: string required: - id - title - is_primary - priority - created title: ProductImageOut type: object securitySchemes: APIKeyHeaderAuth: type: apiKey in: header name: X-API-Key OAuthTokenAuth: type: http scheme: bearer SessionAuth: type: apiKey in: cookie name: sessionid ````