# Submit Logo

> Submit the logo

**Endpoint:** `PUT /v1/applications/{application_id}/logo`  
**Access:** Free (guest token or account)  
**MCP tool:** `submit_logo`

SVG text, an https URL, or the logo discovered on the website. The original is preserved byte-for-byte; the SVG Tiny P/S derivative and a trademark search start in the background.

## cURL example

```bash
curl -X PUT "https://api.verifiedinbox.ai/v1/applications/0192a5e0-1234-7000-8000-000000000001/logo" \
  -H "VI-Guest-Token: vi_guest_YOUR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "filename": "string",
    "svg": "string"
  }'
```

## Parameters

| Parameter | Type | Description |
|---|---|---|
| `application_id` (path, required) | `string (uuid)` | Application id. |
| `VI-Environment` (header) | `string` | `live` (default) or `test`. Used for anonymous callers and OAuth access tokens; API keys and web sessions carry their own environment. |
| `If-Match` (header) | `string` | The application `version` you last saw, e.g. `"7"`. Stale → 409 `version_conflict` with the current application. |

## Request body

```json
{
  "filename": "string",
  "svg": "string"
}
```

## Responses

### 201 OK

Received; processing.

```json
{
  "analysis": {
    "base_profile": "string",
    "compliant": true,
    "element_count": 1,
    "has_raster": true,
    "has_text": true,
    "has_title": true,
    "height": 1,
    "issues": [],
    "size_bytes": 1,
    "square": true,
    "title": "string",
    "version": "string",
    "view_box": [],
    "width": 1
  },
  "approved_at": "2026-10-31T12:00:00Z",
  "changes": [
    {
      "code": "string",
      "lossy": true,
      "message": "Everything checks out.",
      "technical": "string"
    }
  ],
  "converted": {
    "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
    "size": 1,
    "url": "https://verifiedinbox.ai/verify/0192a5e0-1234-7000-8000-000000000001/domain"
  },
  "created_at": "2026-10-31T12:00:00Z",
  "error": "string",
  "id": "0192a5e0-1234-7000-8000-000000000001",
  "original": {
    "filename": "string",
    "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
    "size": 1,
    "url": "https://verifiedinbox.ai/verify/0192a5e0-1234-7000-8000-000000000001/domain"
  },
  "previews": {
    "converted": "string",
    "original": "string"
  },
  "requirements": [
    {
      "id": "0192a5e0-1234-7000-8000-000000000001",
      "label": "string",
      "met_by_converted": true,
      "met_by_original": true,
      "required": true,
      "source": "gmail"
    }
  ],
  "review": [
    {
      "change": "string",
      "code": "string",
      "lossy": true,
      "noticed": "string",
      "outcome": "changed",
      "source": "gmail",
      "technical": "string",
      "why": "string"
    }
  ],
  "source": "upload",
  "source_url": "https://verifiedinbox.ai/verify/0192a5e0-1234-7000-8000-000000000001/domain",
  "status": "processing",
  "visual_diff": {
    "score": 1,
    "verdict": "identical"
  }
}
```

### 400 (invalid_request)

`invalid_request` — the request is malformed.

```json
{
  "error": {
    "code": "invalid_request",
    "message": "Please provide a valid domain name."
  }
}
```

### 401 (unauthenticated)

`unauthenticated` — sign in / send a valid credential. `next_action.kind = sign_in`.

```json
{
  "error": {
    "code": "unauthenticated",
    "message": "Sign in or provide an API key to continue.",
    "next_action": {
      "kind": "sign_in",
      "title": "Sign in or create an account",
      "url": "/login"
    }
  }
}
```

### 404 (not_found)

`not_found` — doesn't exist or isn't accessible to you (never 403).

```json
{
  "error": {
    "code": "not_found",
    "message": "We couldn't find that resource."
  }
}
```

### 409 (version_conflict)

`conflict` / `version_conflict` (current state in `details.application`) / Idempotency-Key reuse.

```json
{
  "error": {
    "code": "version_conflict",
    "message": "This application was updated elsewhere. Refresh and try again."
  }
}
```

### 422 (unprocessable)

`unprocessable` / `blocked_provider` — understood but can't be done (plain-English reason).

```json
{
  "error": {
    "code": "unprocessable",
    "message": "Shared mailbox providers like gmail.com cannot be verified."
  }
}
```

### 429 (rate_limited)

`rate_limited` — retry after `Retry-After` seconds (`details.retry_after_seconds`). `limit_reached` — a quota is used up; `details.limit` names it and `next_action` offers support.

```json
{
  "error": {
    "code": "rate_limited",
    "message": "Too many requests. Please wait a moment and try again."
  }
}
```