curl --request PUT \
--url https://app.sapientpriors.com/api/v1/agents/{agent_id}/threads/{thread_id}/sources/images \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: image/png' \
--data '<string>'import requests
url = "https://app.sapientpriors.com/api/v1/agents/{agent_id}/threads/{thread_id}/sources/images"
payload = "<string>"
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "image/png"
}
response = requests.put(url, data=payload, headers=headers)
print(response.text)const options = {
method: 'PUT',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'image/png'},
body: '<string>'
};
fetch('https://app.sapientpriors.com/api/v1/agents/{agent_id}/threads/{thread_id}/sources/images', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));{
"source_id": "<string>",
"label": "<string>",
"media_type": "<string>",
"href": "<string>",
"verified": true
}{
"error": "<string>",
"code": "<string>",
"request_id": "<string>",
"details": "<string>"
}{
"error": "<string>",
"code": "<string>",
"request_id": "<string>",
"details": "<string>"
}{
"error": "<string>",
"code": "<string>",
"request_id": "<string>",
"details": "<string>"
}{
"error": "<string>",
"code": "<string>",
"request_id": "<string>",
"details": "<string>"
}{
"error": "<string>",
"code": "<string>",
"request_id": "<string>",
"details": "<string>"
}Upload an image source
Stores one validated image under the authenticated caller’s agent and returns the source reference accepted by the chat operations.
curl --request PUT \
--url https://app.sapientpriors.com/api/v1/agents/{agent_id}/threads/{thread_id}/sources/images \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: image/png' \
--data '<string>'import requests
url = "https://app.sapientpriors.com/api/v1/agents/{agent_id}/threads/{thread_id}/sources/images"
payload = "<string>"
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "image/png"
}
response = requests.put(url, data=payload, headers=headers)
print(response.text)const options = {
method: 'PUT',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'image/png'},
body: '<string>'
};
fetch('https://app.sapientpriors.com/api/v1/agents/{agent_id}/threads/{thread_id}/sources/images', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));{
"source_id": "<string>",
"label": "<string>",
"media_type": "<string>",
"href": "<string>",
"verified": true
}{
"error": "<string>",
"code": "<string>",
"request_id": "<string>",
"details": "<string>"
}{
"error": "<string>",
"code": "<string>",
"request_id": "<string>",
"details": "<string>"
}{
"error": "<string>",
"code": "<string>",
"request_id": "<string>",
"details": "<string>"
}{
"error": "<string>",
"code": "<string>",
"request_id": "<string>",
"details": "<string>"
}{
"error": "<string>",
"code": "<string>",
"request_id": "<string>",
"details": "<string>"
}Authorizations
Your API key, shaped sp_<key_id>_<secret>, sent as Authorization: Bearer sp_.... It identifies your organization, not a person. Your organization owns the agents, holds the credit, and is billed. Every key your organization holds reaches the same things, so you rotate a key by minting the new one, deploying it, and revoking the old one.
Keep the key on your server. A request that carries a Sec-Fetch-Site header is refused with 400, because only a browser sets that header. Priors sends no CORS headers, so a browser blocks the call before it leaves the page. The secret is shown once when the key is minted and is stored only as a hash. A lost secret is replaced, never recovered.
An administrator of your organization mints and revokes keys in the Priors application, under Settings. There is no endpoint for it: a key reaches your whole organization, so issuing one is an act of administration.
Headers
Your own identifier for the person this request acts for: an account number, a row id, anything stable on your side. It works only with a partner API key. The value is not stored. Priors hashes it together with your organization id, so two clients that send the same string are still two different people.
With the header, you reach the threads that same person created and no others. A new thread is recorded against that person, and GET /v1/agents/{agent_id} returns that person's conversations only. Without the header, the key acts as the organization and reaches every thread on every agent it owns. Learned memory is shared across the agent either way. Only the thread list narrows.
Sent with anything that is not a partner API key, the header returns 400 instead of being ignored. Sent empty or as whitespace, it also returns 400, and it is never read as absent: absent means the whole organization, which is wider access than you asked for. Surrounding whitespace is removed. The 255-character limit is measured on the value as sent.
1 - 255\SPath Parameters
Unique managed memory-agent identifier.
32^agent_[0-9A-HJKMNP-TV-Z]{26}$Unique thread identifier scoped to the agent.
33^thread_[0-9A-HJKMNP-TV-Z]{26}$Query Parameters
1 - 255Body
The body is of type file.
Response
Stored image source
Server-generated uploaded-source identifier.
^(?:img|src)_[0-9a-f]{32}$Same-origin authenticated download path for the source.
True when the model looked at this source on this turn, which is the case for an image attached to the turn. False when the link comes from a memory the source produced earlier.