Image Hosting

Image hosting: upload an image (or a video up to 10 seconds) and get a directly linkable CDN address, with options for output format, encryption and storage location. 2 channels are currently available.

/api/ImageHosting/

Service Description

The image hosting service uploads images to third-party hosting platforms and returns CDN direct links, ideal for site illustrations, Markdown image hosting and user avatars, with no need to run your own storage or bandwidth.

The scdn channel accepts a local image or a remote image URL, and the server de-duplicates by SHA-256 content hash, so uploading the same image again returns the existing link without consuming extra capacity. The picui channel adds server-side Token-pool management: view used and remaining capacity per Token, and top up Tokens in bulk.

Both channels require project signature authentication. Link availability on third-party hosts is up to them, so keep the original files for anything important.

Response Format

Every endpoint returns the same JSON envelope; the payload is always inside data:

{
  "code": 10000,
  "msg": "成功",
  "data": { ... }
}

code: business status code. 10000 means success; anything else is an error — see the Error Codes page for the full list.
msg: a human-readable message you can show to end users, but never use it for program logic.
data: the payload; usually null on error. Each endpoint's Response section lists its data fields.

Judge success by code, not by the HTTP status code. View all error codes

Under Maintenance This service is currently in "Under Maintenance" status, the API may be temporarily unavailable. The docs and debug below are for reference only.

scdn.io Image Host

scdn.io (img.scdn.io) image hosting Signature Required

Uploads an image and returns a link; the server deduplicates by SHA-256 and returns the existing link for duplicate images. Requires a project signature.

POST /api/ImageHosting/scdn/upload Total calls: 0

Upload Image

Upload an image and get a directly usable CDN link.

Image file image

Local image file (multipart field image; supports jpg/png/webp/gif/bmp/tiff); choose either this or image_url

Remote Image URL image_url

Remote image address (http/https), fetched by the server; choose either this or image

Output Format output_format

Optional: output format, default auto

CDN Domain cdn_domain

Optional: specify the CDN domain for the links (e.g. img.scdn.io); leave empty to choose automatically

Storage Location storage_destination

Optional: storage location

Enable Password password_enabled

Optional: encrypted upload (encrypted images never take part in deduplication)

Access Password image_password

Optional: required when password_enabled=true

Password Mode password_type

Optional: password mode, default plain

Issue Text password_question

Optional: required when password_type=qa

The request body is multipart/form-data (file field image; use the file picker below to upload directly); when using image_url you may also use application/x-www-form-urlencoded.
The server deduplicates by SHA-256: on a hit the message reports that the image already exists and was deduplicated, and deduped=true.
This service requires a project signature (app_id/timestamp/nonce/sign); the online debugger signs automatically on the server side.

Response Common envelope

Field	Type	Description
url	string	CDN direct link
filename	string	File name
storage_backend	string	Storage backend
original_size	int	Original size (bytes)
compressed_size	int	Compressed size (bytes)
compression_ratio	float	Compression ratio
deduped	bool	Whether instant-upload (dedup) was hit
password_protected	bool	Whether password-protected

Example response

{"url": "https://img.scdn.io/xxxx.jpg", "filename": "xxxx.jpg", "storage_backend": "local", "original_size": 123456, "compressed_size": 98765, "compression_ratio": 80.01, "deduped": false, "password_protected": false}

PicUI Image Host

PicUI (v2.picui.cn) image hosting Signature Required

Uploads an image and returns a link; the PicUI account Token is held and accounted for by the server-side Token pool, switching automatically when capacity runs out, so the caller needs no account. Requires a project signature.

POST /api/ImageHosting/picui/upload Total calls: 0

Upload Image

Upload an image and get a directly usable link (with html / markdown and other reference formats).

Image file image *

Local image file (multipart field image), required

Image Permission permission

Optional: image permission; leave empty to use the PicUI default

Storage Strategy ID strategy_id

Optional: PicUI storage strategy ID, default 1 (the regular user strategy)

Album ID album_id

Optional: target album ID

Expiry Time expired_at

Optional: image expiry time, format yyyy-MM-dd HH:mm:ss

Temporary Upload Token upload_token

Optional: PicUI temporary upload Token (its token field); usually not passed

The request body is multipart/form-data (file field image; use the file picker below to upload directly).
The PicUI account Token is selected automatically from the server-side Token pool, so the caller neither needs nor is able to specify it; after a successful upload the Token capacity is decremented by the image size returned by PicUI, and once the capacity is exhausted the Token is deleted automatically and the next one is used.
Pool alert: after an upload, if the remaining pool capacity drops below 50MB the system automatically sends one restock reminder to the admin mailbox (environment variable QQ_MAIL_ACCOUNT; nothing is sent if it is not configured). The alert is sent only on the crossing itself, and fires again only after the pool is restocked above 50MB and drops below again.
Returns 50002 when the Token pool is empty or all capacities are exhausted; call the Import Tokens endpoint first.
This service requires a project signature (app_id/timestamp/nonce/sign); the online debugger signs automatically on the server side.

Response Common envelope

Field	Type	Description
url	string	Image direct link
name	string	File name
pathname	string	Storage path
origin_name	string	Original file name
size_kb	int	File size (KB)
size_bytes	int	File size (bytes)
mimetype	string	MIME type
extension	string	Extension
md5	string	MD5 value
sha1	string	SHA-1 value
links	object	Various reference formats
links.html	string	HTML embed
links.bbcode	string	Forum BBCode
links.markdown	string	Markdown image
links.markdown_with_link	string	Markdown with link
links.thumbnail_url	string	Thumbnail URL

Example response

{"url": "https://v2.picui.cn/i/2026/07/01/xxxx.jpg", "name": "xxxx.jpg", "pathname": "/i/2026/07/01/xxxx.jpg", "origin_name": "photo.jpg", "size_kb": 120, "size_bytes": 122880, "mimetype": "image/jpeg", "extension": "jpg", "md5": "0f3d2c1b4a5968778695a4b3c2d1e0f1", "sha1": "0f3d2c1b4a5968778695a4b3c2d1e0f1a2b3c4d", "links": {"html": "<img src=\"https://v2.picui.cn/i/2026/07/01/xxxx.jpg\">", "bbcode": "[img]https://v2.picui.cn/i/2026/07/01/xxxx.jpg[/img]", "markdown": "![xxxx.jpg](https://v2.picui.cn/i/2026/07/01/xxxx.jpg)", "markdown_with_link": "[![xxxx.jpg](https://v2.picui.cn/i/2026/07/01/xxxx.jpg)](https://v2.picui.cn/i/2026/07/01/xxxx.jpg)", "thumbnail_url": "https://v2.picui.cn/i/2026/07/01/xxxx.jpg"}}

GET /api/ImageHosting/picui/tokens Total calls: 0

Query Token Pool

View the overall pool capacity plus the used / remaining capacity of each Token (Tokens are masked).

Capacity is provided in both MB (2 decimals, easier to read) and bytes (easier to compute).
Tokens whose capacity is exhausted (used ≥ capacity) are deleted automatically, so every Token listed in items can still be used; the server only keeps capacity records and never stores images.

Response Common envelope

Field	Type	Description
count	int	Number of usable tokens in the pool
total_capacity_mb	float	Total capacity (MB)
total_capacity_bytes	int	Total capacity (bytes)
total_used_mb	float	Total used capacity (MB)
total_used_bytes	int	Total used capacity (bytes)
total_remaining_mb	float	Total remaining capacity (MB; use it to decide restocking)
total_remaining_bytes	int	Total remaining capacity (bytes)
items	array	Per-token capacity details
items[].token	string	Masked token (first 6 and last 4 kept)
items[].capacity_mb	float	This token's total capacity (MB)
items[].capacity_bytes	int	This token's total capacity (bytes)
items[].used_mb	float	This token's used capacity (MB)
items[].used_bytes	int	This token's used capacity (bytes)
items[].remaining_mb	float	This token's remaining capacity (MB)
items[].remaining_bytes	int	This token's remaining capacity (bytes)
items[].create_time	string	This token's creation time

Example response

{"count": 1, "total_capacity_mb": 50.0, "total_capacity_bytes": 52428800, "total_used_mb": 12.34, "total_used_bytes": 12942336, "total_remaining_mb": 37.66, "total_remaining_bytes": 39486464, "items": [{"token": "657|uN****afdb", "capacity_mb": 50.0, "capacity_bytes": 52428800, "used_mb": 12.34, "used_bytes": 12942336, "remaining_mb": 37.66, "remaining_bytes": 39486464, "create_time": "2026-09-01 10:00:00"}]}

POST /api/ImageHosting/picui/tokens Total calls: 0

Import Tokens

Add one or more Tokens to the pool (enter them directly, or upload a file with one Token per line).

Token tokens

Optional: Tokens to add, several allowed (provide at least one of this and token_file)

Multiple values: Repeatable; or separate several values with commas or newlines to submit them at once

Token File token_file

Optional: text file with one Token per line (UTF-8)

Capacity per Token (MB) capacity_mb

Optional: capacity of each Token (MB), default 50

Tokens are unique: the same Token is stored only once, so repeated imports create no duplicates (those already in the database, or repeated within the same request, are counted in duplicated and skipped).
tokens supports repeated fields and comma- or newline-separated values, so several Tokens can be submitted at once; Tokens must not contain whitespace such as spaces (files with comments or extra columns are rejected to avoid importing invalid Tokens).
token_file is a text file with one Token per line; it can be used together with tokens.
Up to 1000 Tokens per import; this service requires a project signature (app_id/timestamp/nonce/sign).

Response Common envelope

Field	Type	Description
submitted	int	Tokens submitted (after dedup)
created	int	Actually created count
duplicated	int	Skipped count (already existed)
duplicated_tokens	array	Masked list of skipped tokens
capacity_bytes	int	Capacity of each new token (bytes)
capacity_mb	float	Capacity of each new token (MB)

Example response

{"submitted": 3, "created": 2, "duplicated": 1, "duplicated_tokens": ["657|uN****afdb"], "capacity_bytes": 52428800, "capacity_mb": 50.0}

Endpoint catalog 4

scdn.io Image Host

POST Upload Image /api/ImageHosting/scdn/upload

PicUI Image Host

POST Upload Image /api/ImageHosting/picui/upload GET Query Token Pool /api/ImageHosting/picui/tokens POST Import Tokens /api/ImageHosting/picui/tokens

Auth Settings

Stored locally only