Last updated on

Introduction

Welcome to unavatar.io, the ultimate avatar service that offers everything you need to easily retrieve user avatars:

It's proudly powered by microlink.io, the headless browser API that handles all the heavy lifting behind the scenes to ensure your avatars are always ready.

Quick start

The service is exposed in unavatar.io via provider endpoints:

Use /:provider/:key for provider-specific lookups, or pass an email as the only path segment for automatic resolution. You can read more in Email avatars and providers.

Authentication

Anonymous requests work without authentication. They are limited to 25 requests/day per IP address.

For PRO users, the requests must include the API key as the x-api-key request header:

curl "https://unavatar.io/github/kikobeats" -H "x-api-key: YOUR_API_KEY"

If the API key is invalid, the service returns 401 with code EAPIKEY.

Rate limit status can be verified using these response headers:

HeaderDescription
x-rate-limit-limitMaximum anonymous requests allowed in the current daily window
x-rate-limit-remainingRequests remaining in the current window
x-rate-limit-resetUTC epoch seconds when the current window resets
$ curl -I https://unavatar.io/github/kikobeats

x-rate-limit-limit: 25
x-rate-limit-remaining: 24
x-rate-limit-reset: 1744243200

Pricing

Unavatar pricing is simple: you can start on the anonymous free tier, then authenticate with x-api-key to get additional included usage and metered billing for higher volume.

ScenarioIncluded free usageBilling
Anonymous (no API key)25 requests/day per IPFree
Authenticated origin requests (x-api-key)50 origin requests/dayMetered monthly after free quota
Proxy requests (datacenter, residential)NoneAlways metered

For higher usage, the PRO plan is usage-based billing that includes the 50 free daily origin requests, metered overage, and custom TTL.

Every request has a cost in tokens ($0.005 per token) based on the proxy tier needed to resolve the avatar:

Proxy tierTokensCost
Origin1$0.005
Datacenter+2$0.015
Residential+4$0.025

The proxy tier used is returned in the x-proxy-tier response header, and the total cost in the x-unavatar-cost header.

$ curl -I -H "x-api-key: YOUR_API_KEY" https://unavatar.io/instagram/kikobeats

x-pricing-tier: pro
x-proxy-tier: origin
x-unavatar-cost: 1

To upgrade, visit unavatar.io/checkout. After completing the payment, you'll receive an API key.

Cache

Unavatar caches avatar lookups to make repeated requests fast and stable:

For example, if you set ttl=1h, the cache behavior looks like this:

TimeRequestCache statusPlan impact
10:00GET /github/kikobeatsMISS (fetched from upstream)Counts as 1 origin request
10:05GET /github/kikobeatsHIT (served from cache)No usage consumed, no cost
10:40GET /github/kikobeatsHIT (served from cache)No usage consumed, no cost
11:02GET /github/kikobeatsMISS (TTL expired, cache refreshed)Counts as 1 origin request
11:10GET /github/kikobeatsHIT (served from cache)No usage consumed, no cost

To check the cache status in real requests, inspect these response headers:

HeaderWhat to look for
x-cache-statusHIT means served from cache. MISS means fetched/refreshed from upstream.
cache-controlShows cache policy and effective TTL (for example public, max-age=3600 for ttl=1h).
$ curl -I -H "x-api-key: YOUR_API_KEY" "https://unavatar.io/github/kikobeats?ttl=1h"

cache-control: public, max-age=3600
x-cache-status: HIT

The same rule applies to anonymous requests: cache hits are free and do not consume the 25 requests/day limit.

After TTL expiration, the next request refreshes the cache and is billed/rate-limited according to the request tier (anonymous, origin, datacenter, or residential).

Query parameters

TTL

Type: number or string
Default: '24h'
Range: from '1h' to '28d'

It determines the maximum quantity of time an avatar is considered fresh.

e.g., unavatar.io/github/kikobeats?ttl=1h

When you look up for a user avatar for the very first time, the service will determine it and cache it respecting TTL value.

The same resource will continue to be used until reach TTL expiration. After that, the resource will be computed, and cache as fresh, starting the cycle.

Fallback

Type: string or boolean

When it can't be possible to get a user avatar, a fallback image is returned instead, and it can be personalized to fit better with your website or application style.

You can get one from boringavatars.com:

e.g., unavatar.io/github/37t?fallback=https://source.boringavatars.com/marble/120/1337_user?colors=264653r,2a9d8f,e9c46a,f4a261,e76f51

or avatar.vercel.sh:

e.g., unavatar.io/github/37t?fallback=https://avatar.vercel.sh/37t?size=400

or a static image:

e.g., unavatar.io/github/37t?fallback=https://avatars.githubusercontent.com/u/66378906?v=4

or even a base64 encoded image. This allows you to return a transparent, base64 encoded 1x1 pixel GIF, which can be useful when you want to use your own background colour or image as a fallback.

e.g., unavatar.io/github/37t?fallback=data:image/gif;base64,R0lGODlhAQABAIAAAP///wAAACH5BAEAAAAALAAAAAABAAEAAAICRAEAOw==

You can pass fallback=false to explicitly disable this behavior. In this case, a 404 Not Found HTTP status code will returned when is not possible to get the user avatar.

JSON

The service returns media content by default.

This makes the service easier to consume directly from HTML markup.

In case you want to get a JSON payload as response, just pass json=true:

e.g., unavatar.io/github/kikobeats?json

Providers

Apple Music

Get artwork for any Apple Music artist, album, or song. Search by name or look up directly by numeric Apple Music ID.

e.g., unavatar.io/apple-music/artist:daft%20punk

The endpoint supports explicit type as part of the input.

If explicit type is not provided, it searches artist and song (in that order).

Available URI format inputs:

  • artist
    • by artist name: unavatar.io/apple-music/artist:daft%20punk
    • by numeric artist ID: unavatar.io/apple-music/artist:5468295
  • album
    • by album name: unavatar.io/apple-music/album:discovery
    • by album ID: unavatar.io/apple-music/album:78691923
  • song
    • by song name: unavatar.io/apple-music/song:harder%20better%20faster%20stronger
    • by song ID: unavatar.io/apple-music/song:697195787

Behance

Get any Behance user's profile picture by their username.

Available inputs:

  • Username, e.g., unavatar.io/behance/vitormatosinhos

Bluesky

Get any Bluesky user's profile picture by their handle. Domain-style handles are supported.

Available inputs:

  • User handle, e.g., unavatar.io/bluesky/pfrazee.com
  • Domain handle, e.g., unavatar.io/bluesky/bsky.app

DeviantArt

Get any DeviantArt user's profile picture by their username.

Available inputs:

  • Username, e.g., unavatar.io/deviantart/spyed

Discord

Get a Discord server's icon by server name or server ID.

Available inputs:

  • Server name, e.g., unavatar.io/discord/lilnasx
  • Server ID, e.g., unavatar.io/discord/uW6Hyf3E9r

Dribbble

Get any Dribbble designer's profile picture by their username.

Available inputs:

  • Username, e.g., unavatar.io/dribbble/omidnikrah

DuckDuckGo

Get the favicon or logo for any domain via DuckDuckGo's icon service. Useful as a fallback when a domain doesn't expose its favicon directly.

Available inputs:

  • Domain, e.g., unavatar.io/duckduckgo/microsoft.com

Facebook

Get any Facebook user, page, or group profile picture by their username or ID.

Available inputs:

  • Username, e.g., unavatar.io/facebook/zuck
  • Page, e.g., unavatar.io/facebook/windtodayco
  • Group ID, e.g., unavatar.io/facebook/1426378481098002

GitHub

Get any GitHub user or organization's profile picture by username, or resolve an avatar from a public email via GitHub search when the address matches a profile or commit history.

Available inputs:

  • User, e.g., unavatar.io/github/mdo
  • Organization, e.g., unavatar.io/github/vercel
  • Email address, e.g., unavatar.io/github/[email protected]

GitLab

Get any GitLab user or organization's profile picture by their username.

Available inputs:

  • User, e.g., unavatar.io/gitlab/sytses
  • Organization, e.g., unavatar.io/gitlab/inkscape

LinkedIn

Get any LinkedIn user or company profile picture by username or company slug.

e.g., unavatar.io/linkedin/user:wesbos

The input supports a URI format type:id.

When no type is provided, it defaults to user (user profile).

Available URI format inputs:

  • user (default): unavatar.io/linkedin/user:wesbos
  • company: unavatar.io/linkedin/company:microlinkhq

Google

Get the favicon or logo for any domain using Google's favicon service.

Available inputs:

  • Domain, e.g., unavatar.io/google/stremio.com

Gravatar

Get any user's avatar by their email address via Gravatar. The most widely used global avatar service — if your users have a Gravatar set up, this is the fastest way to retrieve it.

Available inputs:

Instagram

Get any Instagram user's profile picture by their username. No authentication or API tokens needed — just pass the username.

Available inputs:

  • Username, e.g., unavatar.io/instagram/willsmith

Ko-fi

Get any Ko-fi page's profile picture by the creator username.

Available inputs:

  • Creator username, e.g., unavatar.io/ko-fi/geekshock

Medium

Get any Medium author's profile picture by their username.

Available inputs:

  • Username, e.g., unavatar.io/medium/juancalmaraz

Extract the logo or representative image from any URL. The page is rendered and the best available image is selected — useful for getting brand logos from any website.

Available inputs:

  • Domain, e.g., unavatar.io/microlink/microlink.io

Mastodon

Get any Mastodon user's profile picture from any instance using the public account lookup API. Pass the handle as user@server so the account resolves on the correct home instance.

Available inputs:

OnlyFans

Get any OnlyFans creator's profile picture by their username.

Available inputs:

  • Username, e.g., unavatar.io/onlyfans/amandaribas

OpenStreetMap

Get any OpenStreetMap contributor's profile picture. Accepts either a numeric user ID or a username.

Available inputs:

  • Numeric user ID, e.g., unavatar.io/openstreetmap/98672
  • Username, e.g., unavatar.io/openstreetmap/Terence%20Eden

Patreon

Get any Patreon creator's profile picture by their username.

Available inputs:

  • Username, e.g., unavatar.io/patreon/gametestro

Pinterest

Get any Pinterest user's profile picture by their username.

Available inputs:

  • Username, e.g., unavatar.io/pinterest/ohjoy

Printables

Get any Printables user's profile picture by their username.

Available inputs:

  • Username, e.g., unavatar.io/printables/DukeDoks

PSN Profiles

Get any PlayStation Network user's profile picture by their PSN username.

Available inputs:

  • Username, e.g., unavatar.io/psnprofiles/Duff85

Reddit

Get any Reddit user's avatar by their username.

Available inputs:

  • Username, e.g., unavatar.io/reddit/thisisbillgates
  • Organization, e.g., unavatar.io/reddit/nasa

Snapchat

Get any Snapchat user's profile picture by their username.

Available inputs:

  • Username, e.g., unavatar.io/snapchat/teddysdaytoday

SoundCloud

Get any SoundCloud artist's profile picture by their username.

Available inputs:

  • Username, e.g., unavatar.io/soundcloud/gorillaz

Spotify

Get artwork for any Spotify entity — users, artists, albums, playlists, shows, episodes, or tracks. Look up by username or Spotify ID.

e.g., unavatar.io/spotify/album:7I9Wh2IgvI3Nnr8Z1ZSWby

The endpoint supports explicit type as part of the input.

If explicit type is not provided, it defaults to user.

Available URI format inputs:

  • album: unavatar.io/spotify/album:7I9Wh2IgvI3Nnr8Z1ZSWby
  • artist: unavatar.io/spotify/artist:1vCWHaC5f2uS3yhpwWbIA6
  • episode: unavatar.io/spotify/episode:1YNm34Q8ofC2CDTYYLaFMj
  • playlist: unavatar.io/spotify/playlist:37i9dQZF1DZ06evO3KIUZW
  • show: unavatar.io/spotify/show:0iykbhPkRz53QF8LR2UyNO
  • track: unavatar.io/spotify/track:4OROzZUy6gOWN4UGQVaZMF
  • user (default): unavatar.io/spotify/user:kikobeats

Steam

Get any Steam player or community group profile picture by public profile name, numeric account ID, or group name.

e.g., unavatar.io/steam/id:gabelogannewell

The input supports a URI format type:value.

When no type is provided, it defaults to id (player profile name).

Available URI format inputs:

  • id (default): unavatar.io/steam/id:gabelogannewell
  • profile: unavatar.io/steam/profile:76561198044605749
  • group: unavatar.io/steam/group:murcia-gaming

Substack

Get any Substack author's profile picture by their publication username.

Available inputs:

  • Publication username, e.g., unavatar.io/substack/bankless

Telegram

Get any Telegram user's profile picture by their username.

Available inputs:

  • Username, e.g., unavatar.io/telegram/drsdavidsoft

Threads

Get any Threads user's profile picture by their username.

Available inputs:

  • Username, e.g., unavatar.io/threads/zuck

TikTok

Get any TikTok user's profile picture by their username. No authentication or API tokens needed — just pass the username.

Available inputs:

  • Username, e.g., unavatar.io/tiktok/carlosazaustre

Tumblr

Get any Tumblr blog's profile picture by their username.

Available inputs:

  • Username, e.g., unavatar.io/tumblr/nasa

Twitch

Get any Twitch streamer's profile picture by their username.

Available inputs:

  • Username, e.g., unavatar.io/twitch/midudev

Vimeo

Get any Vimeo user's profile picture by their username.

Available inputs:

  • Username, e.g., unavatar.io/vimeo/ladieswithlenses

WhatsApp

Get the profile picture for a WhatsApp channel or chat by ID.

e.g., unavatar.io/whatsapp/phone:34660021551

The input supports a URI format type:id.

If no type is provided, the input is treated as a phone number.

Available URI format inputs:

  • phone: unavatar.io/whatsapp/phone:34660021551
  • channel: unavatar.io/whatsapp/channel:0029VaARuQ7KwqSXh9fiMc0m
  • chat: unavatar.io/whatsapp/chat:D2FFycjQXrEIKG8qQjbwZz

X/Twitter

Get any X (formerly Twitter) user's profile picture by their username.

Available inputs:

  • Username, e.g., unavatar.io/x/elonmusk

Xbox Gamertag

Get any Xbox player's profile picture by their gamertag.

Available inputs:

  • Gamertag, e.g., unavatar.io/xboxgamertag/GD-BerserkerTTD

YouTube

Get any YouTube channel's thumbnail by their handle, legacy username, or channel ID.

e.g., unavatar.io/youtube/casey

The endpoint supports specific input formats.

If the input starts with UC and has 24 characters, it is treated as a channel ID. Otherwise, it is treated as a handle.

Available inputs:

  • username: unavatar.io/youtube/casey
  • channel: unavatar.io/youtube/UC_x5XG1OV2P6uZZ5FSM9Ttw

Response Format

A response is returning the user avatar by default.

However, you can get a json as response payload.

When an endpoint returns JSON, the shape is predictable so you can parse it reliably in your app:

FieldTypePresent inDescription
statusstringall JSON responsesOne of: success, fail, error.
messagestringall JSON responsesHuman-readable summary for display/logging.
dataobjectsuccessResponse payload for successful requests.
codestringfail, errorStable machine-readable error code.
morestring (URL)most fail/error responsesDocumentation URL with troubleshooting details.
reportstringsome error responsesSupport contact channel (for example mailto:).

Response Headers

These headers help you understand pricing, limits, and request diagnostics.

HeaderPurpose
x-pricing-tierfree or pro — the plan used for this request
x-timestampServer timestamp when request was received
x-unavatar-costToken cost of the request (avatar routes only)
x-proxy-tierProxy tier used: origin, datacenter, or residential
x-rate-limit-limitMaximum requests allowed per window (free tier only)
x-rate-limit-remainingRemaining requests in current window (free tier only)
x-rate-limit-resetUTC epoch seconds when window resets (free tier only)
retry-afterSeconds until rate limit resets (only on 429 responses)
$ curl -I -H "x-api-key: YOUR_API_KEY" https://unavatar.io/github/kikobeats

x-pricing-tier: pro
x-timestamp: 1744209600
x-unavatar-cost: 1
x-proxy-tier: origin
x-rate-limit-limit: 50
x-rate-limit-remaining: 49
x-rate-limit-reset: 1744243200

Response Errors

Expected errors are known operational cases returned with stable codes.

HTTPCodeTypical trigger
400ESESSIONIDMissing session_id in /checkout/success
400ESESSIONCheckout session not paid or not found
400ESIGNATUREMissing stripe-signature header
400EWEBHOOKInvalid/failed Stripe webhook processing
400EAPIKEYVALUEMissing apiKey query parameter
400EAPIKEYLABELMissing label query parameter
401EEMAILInvalid or missing authenticated email
401EUSERUNAUTHORIZEDMissing/invalid auth for protected routes
401EAPIKEYInvalid x-api-key
403ETTLCustom ttl requested without pro plan
403EPROProvider restricted to pro plan
404ENOTFOUNDRoute not found
404EAPIKEYNOTFOUNDAPI key not found
409EAPIKEYEXISTSCustom API key already exists
409EAPIKEYLABELEXISTSAPI key label already exists
409EAPIKEYMINAttempt to remove last remaining key
429ERATEAnonymous daily rate limit exceeded
500ECHECKOUTStripe checkout session creation failed
500EAPIKEYFAILEDAPI key retrieval after checkout failed
500EINTERNALUnexpected internal server failure

Contact

If you have a suggestion or need to report a bug, contact us at [email protected].