Documentation

Build with the SmallPict Platform.

Integrate high-speed AVIF/WebP image optimization into WordPress, custom backends, and cloud microservices with sub-50ms latency.

Quickstart Guide

01

Get API Credentials

Sign in to your dashboard to generate your pair of X-API-Key and Secret Key.

02

Install Official SDK or Call API

Use our official library for your stack (Node, Go, Python, PHP, Java, Rust, Ruby) with built-in HMAC signing.

03

Optimize & Serve at Edge

Send image buffers or URLs to receive optimized AVIF/WebP binaries cached globally across Cloudflare edge nodes.

HMAC-SHA256 Auth

Every request requires an HMAC-SHA256 signature calculated from the HTTP method, path, timestamp, and body hash to prevent replay and tampering attacks.

X-API-Key: sp_live_9a8b7c6d...
X-Timestamp: 1716301234
X-Signature: 3a9f8b2c4d6e8a...
Manage API Keys in Dashboard

Official SDK Ecosystem

Production-tested libraries with built-in HMAC signing, automatic idempotency keys, exponential backoff with jitter, and zero-leak credential masking.

Simple to integrate. Engineered for scale.

Whether you are using raw HTTP cURL requests or our typed SDKs, integrating SmallPict takes minutes with full security and resilience out of the box.

Automatic HMAC-SHA256 signing & timestamp drift check
Automatic UUID v4 idempotency keys for zero duplicate charges
Global Cloudflare Enterprise edge delivery
curl -X POST https://api.smallpict.app/v1/optimize \
  -H "X-API-Key: sp_live_9a8b7c6d5e4f3a2b1c0d9e8f..." \
  -H "X-Timestamp: 1716301234" \
  -H "X-Signature: 3a9f8b2c4d6e8a0f1b3c5d7e9f2a..." \
  -H "Content-Type: application/json" \
  -d '{
    "filename": "hero.jpg",
    "mime_type": "image/jpeg",
    "filesize": 1654200,
    "options": {
      "format": "avif",
      "quality": 80,
      "strip_metadata": true
    }
  }'
HMAC-SHA256 Signed & Production Ready

Need custom enterprise assistance?

Our engineering team is available for custom multi-region setups, private VPC endpoints, and BYOK CDN configurations.