image_urlstringRequiredThe picture to redraw. The result keeps its aspect ratio; the resolution tier sets the long side.
- Default
- Not specified
- Constraints
- format:"uri"contentMediaType:["image/jpeg","image/png","image/webp","image/gif"]
Image-to-image on Z-Image Base, Alibaba Tongyi-MAI's 6-billion-parameter model, with up to three of your own LoRAs and a strength control. One source image in, the same aspect ratio out at a 1k or 1.5k long side, and no filter on prompts, weights or results.
Examples use the selected endpoint’s public parameter definitions. Replace the API key and example media, then send the request from your server.
SDKs & integrationshttps://api.spicyapi.ai/api/v1/jobs/createTaskKeep the API key in the server environment variable SPICY_API_KEY. Use Bearer authentication and Content-Type: application/json for JSON requests.
Authorization: Bearer $SPICY_API_KEY
# Generate the idempotency key once; reuse it when retrying after a lost response.
export SPICY_IDEMPOTENCY_KEY="${SPICY_IDEMPOTENCY_KEY:-$(uuidgen)}"
curl -X POST https://api.spicyapi.ai/api/v1/jobs/createTask \
-H "Authorization: Bearer $SPICY_API_KEY" \
-H "Content-Type: application/json" \
-H "Idempotency-Key: $SPICY_IDEMPOTENCY_KEY" \
-d '{
"model": "alibaba/z-image-base-lora/edit",
"input": {
"image_url": "https://example.com/reference.png",
"output_format": "jpeg",
"prompt": "A ceramic teapot on a linen cloth, soft window light, muted palette",
"resolution": "1k"
}
}'
# Copy data.taskId from the response into TASK_ID, then poll the status.
TASK_ID="TASK_ID_FROM_RESPONSE"
curl "https://api.spicyapi.ai/api/v1/jobs/recordInfo?taskId=$TASK_ID" \
-H "Authorization: Bearer $SPICY_API_KEY"Generated from this model’s input schema — the same one the API validates every request against.
Place these fields inside the request body’s input object. Names and types match the API. Do not assume a default when none is specified.
image_urlstringRequiredThe picture to redraw. The result keeps its aspect ratio; the resolution tier sets the long side.
promptstringRequiredDescribe the whole picture you want back, not just the change. Put a LoRA's trigger phrase first. Up to 5,000 characters.
seedintegerOptionalKeeps results comparable while you adjust strength. It does not guarantee the exact same pixels on every run.
output_formatstringOptionalJPEG by default, or PNG or WebP. The format does not change the price.
"jpeg""png""webp"lorasarray<object>OptionalUp to three {path, scale} entries trained on Z-Image Base; scale 0 to 4, 1 is neutral. A style LoRA does most of the restyling here.
loras[].pathstringRequired within objectDirect URL of a LoRA weights file.
loras[].scalenumberRequired within objectWeight strength from zero to four.
strengthnumberOptionalHow far to move from the source, 0 to 1; 0.7 by default. 0.6 with a style LoRA keeps the composition; around 0.75 the pose and setting are redrawn; from 0.85 it is a new picture.
resolutionstringOptional1k returns a long side of 1,024 pixels and is the default; 1.5k returns 1,536. Both cost the same, and the aspect ratio always follows the source.
"1k""1.5k"{
"additionalProperties": false,
"properties": {
"image_url": {
"contentMediaType": [
"image/jpeg",
"image/png",
"image/webp",
"image/gif"
],
"description": "Source image. The result keeps its aspect ratio.",
"format": "uri",
"type": "string",
"x-ui": {
"max_size_mb": 10,
"order": 90,
"primary": true,
"widget": "upload"
}
},
"loras": {
"default": [],
"description": "Up to three LoRA weight files trained for Z-Image Base, each with its own strength.",
"items": {
"additionalProperties": false,
"properties": {
"path": {
"contentMediaType": [
"application/octet-stream"
],
"description": "Direct URL of a LoRA weights file.",
"format": "uri",
"minLength": 1,
"type": "string"
},
"scale": {
"default": 1,
"description": "Weight strength from zero to four.",
"maximum": 4,
"minimum": 0,
"type": "number"
}
},
"required": [
"path",
"scale"
],
"type": "object"
},
"maxItems": 3,
"type": "array",
"x-ui": {
"order": 50,
"widget": "object-list"
}
},
"output_format": {
"default": "jpeg",
"description": "Container of the returned image.",
"enum": [
"jpeg",
"png",
"webp"
],
"type": "string",
"x-ui": {
"order": 20,
"widget": "select"
}
},
"prompt": {
"description": "Describe the whole image you want back, not just the change.",
"maxLength": 5000,
"minLength": 1,
"type": "string",
"x-ui": {
"order": 100,
"widget": "textarea"
}
},
"resolution": {
"default": "1k",
"description": "Length of the output's long side: 1k is 1024 pixels, 1.5k is 1536. The source's aspect ratio is kept.",
"enum": [
"1k",
"1.5k"
],
"type": "string",
"x-ui": {
"affects_price": false,
"order": 70,
"widget": "radio"
}
},
"seed": {
"description": "Random seed for controlled comparisons.",
"maximum": 2147483647,
"minimum": 0,
"type": "integer",
"x-ui": {
"order": 10,
"widget": "number"
}
},
"strength": {
"default": 0.7,
"description": "How far to move away from the source, from 0 to 1.",
"maximum": 1,
"minimum": 0,
"type": "number",
"x-ui": {
"order": 60,
"step": 0.05,
"widget": "slider"
}
}
},
"required": [
"prompt",
"image_url"
],
"type": "object",
"x-pricing": {
"billingMode": "per_unit",
"variantFields": []
}
}HTTP 202 means the task was accepted, not completed. Save the returned taskId and query that task. Do not create another task while waiting for its result.
HTTP/1.1 202 Accepted
Location: /api/v1/jobs/recordInfo?taskId=job_01k3m8x9q2z4v7n5p6r8s0t1w3
{
"code": 200,
"msg": "success",
"request_id": "req_example_create",
"data": {
"taskId": "job_01k3m8x9q2z4v7n5p6r8s0t1w3",
"state": "queued",
"estimatedCost": "0.750000"
}
}The accepted response includes the estimate so your app can show the same amount in task history and billing.
curl --get "https://api.spicyapi.ai/api/v1/jobs/recordInfo" \
--data-urlencode "taskId=$TASK_ID" \
-H "Authorization: Bearer $SPICY_API_KEY"Start polling at about 2 seconds and gradually increase the interval. Stop at a terminal state. After a connection failure, query the original taskId. Retry creation only with the original idempotency key and body.
import { verifyWebhook } from "@spicyapi/sdk";
// express.raw keeps the bytes we signed; express.json never matches.
app.post("/hooks/spicy", express.raw({ type: "application/json" }), (req, res) => {
const { payload } = verifyWebhook({
rawBody: req.body,
timestamp: req.header("X-Webhook-Timestamp"),
signature: req.header("X-Webhook-Signature"),
payloadVersion: Number(req.header("X-Webhook-Payload-Version")),
secret: process.env.SPICY_WEBHOOK_SECRET,
});
res.status(200).end();
void handleFinishedTask(payload);
});Pass callBackUrl when you create the task and the finished record is POSTed to you — no polling loop at all. Every delivery carries X-Webhook-Timestamp, X-Webhook-Signature and X-Webhook-Payload-Version. The signature is a base64 HMAC-SHA256 over taskId.timestamp.sha256(body), so it must be checked against the raw bytes: parsing the JSON and re-serialising it changes them and the check will fail. Failed deliveries are retried, so the same taskId can arrive twice — make the handler idempotent. Answer 2xx first and do the work afterwards; a slow handler is treated as a failed delivery.
Consume output only when state is succeeded. On failure, use errorCode, errorMessage and request_id to investigate. Example costs and states do not represent an actual bill.
{
"code": 200,
"msg": "success",
"request_id": "req_example_record",
"data": {
"taskId": "job_01k3m8x9q2z4v7n5p6r8s0t1w3",
"model": "alibaba/z-image-base-lora/edit",
"state": "succeeded",
"output": {
"assets": [
{
"key": "tasks/2026/08/28/job_01k3m8x9q2z4v7n5p6r8s0t1w3/3f7a1c9e5b2d48f0a6c1e3d5b7f9a1c3.png",
"mime": "image/png",
"url": "https://example.r2.cloudflarestorage.com/results/job_01k3m8x9q2z4v7n5p6r8s0t1w3/result.png?X-Amz-Signature=SIGNATURE_FROM_RESPONSE",
"expiresAt": "2026-08-28T12:20:08.000Z"
}
]
},
"cost": "0.750000",
"settled": true,
"createdAt": "2026-08-28T12:00:00Z",
"completedAt": "2026-08-28T12:00:30Z"
}
}For each available asset, open or download assets[].url directly without an API Authorization header. The signed URL expires at expiresAt; poll the task again to refresh it while the asset remains within its retention period. A pending or unavailable asset has no URL. Treat signed URLs as private.
Use SpicyAPI in your app, terminal, AI assistant or visual workflow. Choose a setup guide below.
You do not have to write any of the code above. Connect the MCP server once and any agent that speaks MCP — Claude Code, Codex, Cursor, Windsurf, VS Code, Gemini CLI, Cline, LibreChat — can run this model by name, or run it from your shell with a single command.
Use alibaba/z-image-base-lora/edit to edit ./poster.png — warmer light, cleaner background — and save the result next to it.
The agent looks the model up in the live catalogue, uploads the local file for you, then shows the exact quote and its maximum charge and waits for your confirmation. Nothing is billed until you say yes.
claude mcp add spicyapi -e SPICY_API_KEY=$SPICY_API_KEY \
-- npx --yes --package=@spicyapi/mcp spicyapi-mcp
npx skills add spicyapi-ai/spicy-skillThe first line gives the agent the tools; the second gives it the Skill — the operating rules for them, so it quotes before it bills, uploads local files instead of pasting bytes, and reads the finished asset URL rather than guessing. Every other client takes the same server through its own config file: see the developer hub.
npx @spicyapi/cli tasks create --model alibaba/z-image-base-lora/edit \
--input-json '{"image_url":"https://example.com/reference.png","output_format":"jpeg","prompt":"A ceramic teapot on a linen cloth, soft window light, muted palette","resolution":"1k"}' \
--waitThe input is this endpoint’s own schema, same as the examples above. --wait polls until the task is finished and prints it; add --yes to skip the confirmation prompt in CI. Set SPICY_API_KEY first — one key works for the API, the CLI and the MCP server.
npx @spicyapi/cli files upload ./poster.png
# -> spicy://uploads/01k3m8x9q2z4v7n5p6r8s0t1w3
npx @spicyapi/cli tasks create --model alibaba/z-image-base-lora/edit \
--input-json '{"image_url":"spicy://uploads/01k3m8x9q2z4v7n5p6r8s0t1w3"}' \
--waitRequest bodies take URLs, not bytes. Upload the file first and pass the spicy:// URI it prints — the field name above is this endpoint’s own, straight from its schema. An agent on MCP does this step for you, which is why the sentence further up can name ./poster.png directly. Media already reachable over public HTTPS needs no upload.
npx @spicyapi/cli tasks create --model alibaba/z-image-base-lora/edit \
--input-json '{…}' --retention 1h --wait
npx @spicyapi/cli tasks get $TASK_ID # read back the retention that applied--retention only ever shortens the window — 30m, 1h, 7d, or 0 to delete as soon as the task reaches a terminal state. The value that actually applies is the shortest of your request, your account settings and the platform maximum, so read it back from the task record rather than assuming the number you asked for took effect. Passing a longer window than your account allows does nothing.
Install the SpicyAPI nodes from ComfyUI Manager or with the command below, then search for Z-Image Base LoRA · Image Editing on the canvas. The node has the same options as this page and shows its price before it runs.
cd ComfyUI/custom_nodes
git clone https://github.com/spicyapi-ai/comfyui-spicyapiThe embedded panel reads the same schema as this page, so it cannot drift from the API. If your docs need the content to be searchable, read the JSON under /api/embed/models/ and render it yourself.
<iframe src="https://spicyapi.ai/embed/en/models/z-image-base-lora/api?model=alibaba%2Fz-image-base-lora%2Fedit" width="100%" height="560" loading="lazy" title="Request example" style="border:1px solid rgba(0,0,0,.12)"></iframe>