# imagebin.ca

> An image hosting/bin service for uploading, sharing, and managing images.
> Images can be public or private, are served through stable view/direct URLs,
> and are moderated by scan pipelines; owner metadata includes classification,
> scan state, AI caption/tags, AI opt-out, and download limits. Accounts, OAuth,
> and API keys are federated from pastebin.ca.

## How it works

- Upload an image as raw bytes or multipart/form-data; metadata can include title,
  description, tags, category, and private visibility.
- Public images expose share/view and direct image URLs. Owners can list, inspect,
  and delete their uploads, including moderation and AI-caption pipeline state.
- Image moderation and captioning are asynchronous. AI captions/tags may be null or
  pending, and owners can opt out where supported.

## Developer docs

- [Developer guide](https://imagebin.ca/docs): REST API, MCP, OAuth, and discovery.
- [OpenAPI 3.1 spec](https://imagebin.ca/api/v1/openapi.json): the full REST contract.
- [MCP server](https://imagebin.ca/mcp): Model Context Protocol endpoint for AI agents.
- [Agent card](https://imagebin.ca/.well-known/agent.json): machine-readable capabilities.
- [MCP discovery](https://imagebin.ca/.well-known/oauth-protected-resource/mcp): protected-resource metadata.

## API summary

- POST https://imagebin.ca/api/v1/items — upload an image (scope image:create). Raw body or multipart file; optional x-title, x-description, x-tags, x-category, x-private headers.
- GET https://imagebin.ca/api/v1/items/{id} — read image metadata; owners see moderation, scan, AI, and limit fields (scope image:read for owner API-key reads).
- GET https://imagebin.ca/api/v1/account/items — list your images (scope image:read); filters include classification, private, and q.
- DELETE https://imagebin.ca/api/v1/items/{id} — delete one of your images (scope image:delete).

## Authentication

- Account API keys are minted on https://pastebin.ca and audience-bound to https://imagebin.ca.
- Send them as: Authorization: Bearer pbca_live_…
- OAuth 2.1 + PKCE (with optional DPoP) is available for interactive MCP clients;
  pastebin.ca is the authorization server.

## Policy

- Uploaded images are moderated and may be blocked, removed, or held for review.
- Owner-only fields expose scan state, classification, AI caption state, AI opt-out,
  and download limits so clients can avoid assuming immediate public availability.
- Privacy: https://imagebin.ca/privacy
- Report abuse at https://imagebin.ca/abuse.
- The governing family policy lives at https://pastebin.ca/privacy, https://pastebin.ca/terms, and https://pastebin.ca/abuse.