Fetch a meal photo
Streams a stored meal photo from object storage. The key is owner-prefixed, so callers can only read their own photos. Note that the key contains slashes.
/api/nutrition/photo/{key}__Secure-better-auth.session_tokenAPI key · cookierequiredBetter Auth session. Signing in (Google or email magic link) sets an HttpOnly session cookie that scopes every request to that account. The web app and CLI use this; agents use the OAuth 2.1 flow of the MCP server.
AuthorizationBearer token · headerrequiredPersonal API key sent as Authorization: Bearer skcal_…. Create and scope keys in the app under your profile → API keys. Keys default to full access; a scoped key is limited to its granted resource:action permissions and cannot manage other keys.
keystringrequiredOwner-prefixed object key, e.g. user@example.com/2026-06-29/<uuid>.
The image bytes.
string<binary>The requested resource belongs to another user.
errorstringrequiredHuman-readable failure reason.
detailstringOptional extra context, present on upstream failures.
No photo exists at that key.