Getting started

This guide walks you from no account to your first successful API call. Total time: about five minutes.

1. Create a PhotoPick account. Sign up at app.photopick.cz. The API uses the same account as the web app.

2. Create an API key. In the app, open Settings → API keys → New key. Give the key a descriptive name (your integration name is a good default).

3. Pick the scopes you need. Scopes are granted at key-creation time and cannot be widened later. Start with the minimum — customer:read lets you verify the key works:

   Scope	Grants
   customer:read	Read account + key metadata (/me, /customer)
   photos:read	List and read photos
   photos:write	Edit photo metadata, tag assignments
   photos:delete	Delete photos
   tags:read	List tags
   tags:write	Create, rename, delete tags

4. Copy the key. Keys are shown once. They look like pp_live_xxxxxxxxxxxxxxxx. Store it somewhere safe (your secret manager, .env, password manager).

5. Call /me to verify.

   curl

   curl https://api.photopick.cz/api/v1/me \
     -H "Authorization: Bearer pp_live_xxxxxxxxxxxxxxxx"

   JavaScript

   const res = await fetch('https://api.photopick.cz/api/v1/me', {
     headers: { Authorization: `Bearer ${process.env.PHOTOPICK_API_KEY}` },
   });
   console.log(await res.json());

   Python

   import os, httpx
   res = httpx.get(
       'https://api.photopick.cz/api/v1/me',
       headers={'Authorization': f'Bearer {os.environ["PHOTOPICK_API_KEY"]}'},
   )
   print(res.json())

   A 200 OK returns key metadata: apiKeyId, customerId, name, scopes, rateLimit.

Try it from the docs

The API reference embeds Scalar’s try-it-out client. Paste your key once and fire requests against any endpoint without leaving the browser.

What next

• Authentication — header format, scope details, IP whitelist.
• Errors — envelope shape and the full list of error codes.
• curl examples — copy-paste recipes for the most common flows.