> ## Documentation Index
> Fetch the complete documentation index at: https://docs.wachat.net/llms.txt
> Use this file to discover all available pages before exploring further.

# Get Profile Picture

> Return the connected WhatsApp profile picture directly as an image. You can authenticate using the Authorization bearer header or the apiKey query parameter for browser image rendering.

Return the connected WhatsApp profile picture directly as an image.

This endpoint is useful when you want to display the connected account avatar in a browser, documentation page, or an `<img>` tag. For browser image rendering, pass the API key as a query parameter because image tags cannot send Authorization headers.

```html theme={null}
<img src="https://app.wachat.net/api/v1/instance/profile-picture?instanceName=t1_mqc3zame_wa&apiKey=YOUR_API_KEY" alt="WhatsApp Profile Picture" />
```

<Warning>
  Passing an API key in a URL can expose it in browser history, logs, or analytics. Use this only when you need direct image rendering. For backend integrations, prefer the `Authorization: Bearer YOUR_API_KEY` header.
</Warning>


## OpenAPI

````yaml GET /instance/profile-picture
openapi: 3.0.3
info:
  title: Wachat Enterprise API
  description: >
    Welcome to the official Wachat API reference. Wachat provides
    developer-friendly, ultra-reliable infrastructure to scale your WhatsApp
    communications programmatically.


    Easily deploy automated messaging pipelines, orchestrate interactive
    customer engagement patterns, verify phone numbers instantly, and control
    containerized WhatsApp instances via a secure, production-grade REST
    architecture.
  version: 1.0.0
servers:
  - url: https://app.wachat.net/api/v1
    description: Live Production Gateway
security:
  - bearerAuth: []
paths:
  /instance/profile-picture:
    get:
      tags:
        - Session Lifecycle Infrastructure
      summary: Get Instance Profile Picture
      description: >-
        Return the connected WhatsApp profile picture directly as an image. You
        can authenticate using the Authorization bearer header or the apiKey
        query parameter for browser image rendering.
      parameters:
        - in: query
          name: instanceName
          required: true
          schema:
            type: string
          description: Final unique API instance name returned by Wachat.
          example: t1_mq9r2jov_jakarta_store
        - in: query
          name: apiKey
          required: false
          schema:
            type: string
          description: >-
            Optional API key for direct browser image rendering. Prefer
            Authorization bearer header for server-to-server requests.
          example: YOUR_API_KEY
      responses:
        '200':
          description: Profile picture image returned successfully.
          content:
            image/jpeg:
              schema:
                type: string
                format: binary
            image/png:
              schema:
                type: string
                format: binary
        '400':
          description: Missing instanceName query parameter.
        '401':
          description: Missing or invalid API key.
        '403':
          description: Subscription restriction prevented profile picture lookup.
        '404':
          description: Instance or profile picture not found.
        '502':
          description: Could not fetch or load the profile picture.
        '504':
          description: Wachat API request timed out.
components:
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: >-
        Authenticate your integration payloads by injecting your premium secure
        Wachat Account API Private Secret Key inside standard Authorization
        Bearer header vectors.

````