Pixora API

Authorization: Bearer pxr_live_<43 chars>

{
  "id": "<generation-id>",
  "status": "pending",
  "poll_url": "/api/v1/images/generations/<id>",
  "credits_charged": <int>
}

{
  "id": "<generation-id>",
  "status": "pending" | "running" | "success" | "failed" | "cancelled",
  "model": "<model-id>",
  "output_urls": ["https://..."] | null,
  "error_message": "..." | null,
  "credits_used": <int>,
  "duration_ms": <int> | null,
  "created_at": "<ISO 8601>",
  "completed_at": "<ISO 8601>" | null
}

curl https://42ka.cn/api/v1/images/edits \
  -H "Authorization: Bearer pxr_live_..." \
  -H "Content-Type: application/json" \
  -d '{
    "source_image_url": "https://42ka.cn/assets/.../original.png",
    "prompt": "Add bold red text \"SALE\" in the top right corner",
    "model": "gpt-image-2"
  }'

curl https://42ka.cn/api/v1/images/batch \
  -H "Authorization: Bearer pxr_live_..." \
  -H "Content-Type: application/json" \
  -d '{
    "generations": [
      { "prompt": "A red apple", "model": "gpt-image-2" },
      { "prompt": "A green pear", "model": "gpt-image-2" },
      { "prompt": "A yellow banana", "aspect_ratio": "9:16" }
    ]
  }'

{
  "generations": [
    { "id": "abc123...", "poll_url": "/api/v1/images/generations/abc123..." },
    { "id": "def456...", "poll_url": "/api/v1/images/generations/def456..." },
    { "id": "ghi789...", "poll_url": "/api/v1/images/generations/ghi789..." }
  ],
  "total_credits_charged": 300
}

curl 'https://42ka.cn/api/v1/usage?days=14' \
  -H "Authorization: Bearer pxr_live_..."

{
  "days": 14,
  "summary": {
    "total_generations": 47,
    "total_credits_spent": 4700,
    "total_failures": 2,
    "failure_rate": 0.0425,
    "by_model": {
      "gpt-image-2": { "count": 43, "credits": 4300 },
      "nano-banana-pro": { "count": 4, "credits": 100 }
    }
  },
  "series": [
    { "day": "2026-04-30", "generation_count": 3, "credits_spent": 300, "failure_count": 0 },
    ...
  ],
  "balance": {
    "subscription": 2800,
    "topup": 500,
    "total": 3300
  }
}

{
  "error": "<machine-readable-code>",
  "message": "<human-readable-detail>"
}

import fetch from 'node-fetch'

const API_KEY = process.env.PIXORA_API_KEY
const BASE = 'https://42ka.cn/api/v1'

async function generate(prompt) {
  // Submit
  const res = await fetch(`${BASE}/images/generations`, {
    method: 'POST',
    headers: {
      'Authorization': `Bearer ${API_KEY}`,
      'Content-Type': 'application/json',
    },
    body: JSON.stringify({ prompt, model: 'gpt-image-2' }),
  })
  if (!res.ok) throw new Error(`HTTP ${res.status}`)
  const { id } = await res.json()

  // Poll until terminal
  for (;;) {
    await new Promise(r => setTimeout(r, 5000))
    const status = await fetch(`${BASE}/images/generations/${id}`, {
      headers: { 'Authorization': `Bearer ${API_KEY}` },
    }).then(r => r.json())
    if (['success', 'failed', 'cancelled'].includes(status.status)) {
      return status
    }
  }
}

const result = await generate('A red apple on white background')
console.log(result.output_urls[0])

import os
import time
import requests

API_KEY = os.environ['PIXORA_API_KEY']
BASE = 'https://42ka.cn/api/v1'
HEADERS = {'Authorization': f'Bearer {API_KEY}'}

def generate(prompt: str) -> dict:
    r = requests.post(
        f'{BASE}/images/generations',
        headers={**HEADERS, 'Content-Type': 'application/json'},
        json={'prompt': prompt, 'model': 'gpt-image-2'},
    )
    r.raise_for_status()
    gen_id = r.json()['id']

    while True:
        time.sleep(5)
        s = requests.get(f'{BASE}/images/generations/{gen_id}', headers=HEADERS).json()
        if s['status'] in ('success', 'failed', 'cancelled'):
            return s

result = generate('A red apple on white background')
print(result['output_urls'][0])

{
  "event": "generation.completed",
  "generation": {
    "id": "abc123def456",
    "status": "success",
    "model": "gpt-image-2",
    "output_urls": ["https://42ka.cn/assets/..."],
    "credits_used": 100,
    "duration_ms": 24135,
    "created_at": "2026-05-13T08:32:01.234Z",
    "completed_at": "2026-05-13T08:32:25.369Z"
  }
}

import crypto from 'crypto'

function verifyWebhook(signatureHeader, rawBody, secret) {
  // signatureHeader: "t=1715587921,v1=abc123..."
  const parts = Object.fromEntries(
    signatureHeader.split(',').map((p) => p.split('='))
  )
  const ts = parts.t
  const expected = crypto.createHmac('sha256', secret)
    .update(`${ts}.${rawBody}`)
    .digest('hex')
  // Reject if timestamp too old (5 min skew tolerance)
  if (Math.abs(Date.now()/1000 - parseInt(ts)) > 300) return false
  // Constant-time compare to avoid timing attacks
  return crypto.timingSafeEqual(
    Buffer.from(parts.v1, 'hex'),
    Buffer.from(expected, 'hex')
  )
}