A signed screenshot URL lets a browser request an image without putting the API’s signing secret in the URL. A trusted server creates the signature; the public client receives a URL containing the screenshot request and its signature. Anyone who obtains that URL can generally use the request it represents, so signing protects the secret—it does not automatically make the link private, one-time, or temporary.
Use a signed GET URL when a page needs to load the screenshot directly, such as in an HTML <img>. If your application’s backend can make the request, keep authentication and screenshot generation there instead. Signing rules vary by provider, so use the selected service’s current documentation rather than copying another API’s algorithm or URL-building code.
What a signed screenshot URL does
A screenshot API turns a requested webpage and capture options into an image or other supported output. For a public embed, the browser needs a URL it can fetch. Putting a secret API key in that URL would expose it to anyone who can inspect the page, its network requests, or its source. A signed URL instead carries the request parameters and a signature that the API can verify.
In a common design, your server calculates a message authentication code (for example, HMAC-SHA256) over a provider-defined representation of the request. The server adds the resulting signature to the URL. The API repeats the verification using its secret and accepts or rejects the request. The public URL may still show an access-key identifier and the capture parameters; the signing secret is not sent in it.
#1 Best Overall
- Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
- Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
- Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
- Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
- 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.
For instance, ScreenshotOne recommends signed links when screenshot URLs will be shared publicly, because an unsigned link containing an access key can let others reuse the key and consume quota. It says server-side-only requests generally do not need signing. Its documented scheme uses HMAC-SHA256 and a signature parameter. See ScreenshotOne’s signed-links documentation for its current rules and examples.
When to use a signed GET URL—and when not to
Choose a signed URL for direct public fetching
A signed GET URL is useful when the consumer must fetch the screenshot itself without first calling your application, for example:
- An HTML
<img src="...">on a page whose visitor’s browser loads the image. - An Open Graph image URL or another system that accepts a fetchable image URL.
- A simple integration where the capture options fit the provider’s documented query parameters.
RenderScreenshot documents a GET endpoint for this kind of use and describes API-key query authentication as an alternative to a signed URL. Its documentation warns that an API key in a public URL can be exposed. These are provider-specific endpoint options, not requirements shared by every screenshot API. See RenderScreenshot’s GET endpoint documentation.
Rank #2
- 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
- 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
- Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
- 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
- What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.
Use your backend for server-side capture
If your own server can request the screenshot and return, store, or process the result, keep credentials on that server and use the service’s supported backend authentication. A public-link signature adds little value when the request never leaves the trusted environment. Backend requests are also a better fit when the API expects a JSON body, nested options, or a response your application needs to inspect.
Provider guidance differs: ScreenshotAPI documents signed links as GET-only and recommends POST for nested options; another Screenshot API recommends API-key authentication in headers. Neither detail should be assumed for a different service. Check its authentication and request-format documentation before choosing an integration.
How to create a signed URL safely
- Decide where the request runs. If a browser or another public consumer must fetch the screenshot directly, check whether the provider supports signed URLs. If only your server needs the result, use its documented backend authentication.
- Read the provider’s signing specification. Identify the required algorithm, parameters included in the signature, canonicalization and encoding rules, signature parameter name and location, and any restrictions on duplicate parameters.
- Build and sign the request on a trusted server. Keep the signing secret in server-side configuration or a secrets manager. Do not put it in browser JavaScript, a public repository, or a published URL.
- Return only the completed URL to the public client. The client uses it as the image URL or fetch target; it should not calculate signatures using the secret.
- Verify the exact transmitted URL. Query order, percent-encoding, omitted values, and changes made by a URL-building library can invalidate a signature. Test against the service’s current examples.
There is no universal signing snippet that is safe to copy across providers. ScreenshotOne’s signing instructions caution against sorting parameters unless the transmitted order matches the signed order. ScreenshotAPI documents a different recipe: sort parameters alphabetically, exclude the signature from the canonical query, and apply RFC 3986 encoding before HMAC-SHA256. Apple Maps Web Snapshots is not an arbitrary-webpage screenshot service, but its design further demonstrates that signing formats differ: it documents ES256 signing of the request path and query, with the signature appended last. Do not combine these recipes.
Rank #3
- Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
- Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
- Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
- Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
- What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
Fields and URL rules to confirm
- Which query parameters are covered, and whether the access-key identifier is included.
- Whether parameters must retain insertion order or be sorted before signing.
- How spaces, reserved characters, Unicode, and empty values are encoded.
- Whether duplicate parameter names are accepted and, if so, how they are represented.
- Whether the signature field itself is excluded from the signed input, and where it must appear in the final URL.
- Whether a timestamp or expiry value is supported, and whether it must be covered by the signature.
Signed URLs are visible and may be replayable
A signature proves that the request matches the provider’s signing rules; it does not hide the URL. Anyone who gets a valid public link can generally replay that same request unless the service documents a control that prevents it. The term “signed URL” alone does not imply expiration, one-time use, revocation, or privacy. Confirm those behaviors in the chosen service’s current documentation.
Protect the secret and minimize unintended exposure. Generate signatures only on a trusted server, avoid logging secret-bearing material, and avoid publishing a link more broadly than necessary. If a service supports expiry or revocation, determine whether the control is actually part of its signing scheme and how it works. Do not infer protection from a signature parameter alone.
Expiry, caching, and cost depend on the service
Signing and caching are separate concerns. ScreenshotAPI documents a 24-hour cache for matching render inputs and an expired-result response; those are behaviors stated for that service, not general properties of screenshot APIs. A cached result, a link’s validity period, and the service’s billing rules are distinct questions. Check whether the provider caches signed requests, what makes two inputs match, when results expire, and how cache hits affect quota or charges.
Rank #4
- Dual Converters, Infinite Potential：Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
- Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
- Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
- Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
- Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft
Before committing to an integration, compare the actual requirements rather than the label “signed URL”:
- Whether direct public embeds are required or backend delivery is acceptable.
- Whether the provider supports signed URLs as well as authenticated server requests.
- How complex its signing and URL canonicalization rules are.
- Whether the needed capture options fit a flat GET request or require POST JSON.
- What the provider documents about link expiry, revocation, replay, caching, quota, and charges.
Troubleshooting signature and screenshot failures
| Symptom | Likely cause | What to check |
|---|---|---|
| Authentication or signature error | The signed input differs from the request the API received. | Compare the exact parameter set, ordering, encoding, and signature placement with the provider’s specification. Rebuild the URL using that provider’s current example; do not borrow another provider’s canonicalization. |
| Works in a test script, fails in an embed | The browser or page changed the URL, or the signed parameters differ from the final image URL. | Inspect the actual request in browser developer tools. Ensure the URL sent to the browser is exactly the URL your server signed, including escaping and query order where required. |
| Link works, then stops working | The provider may enforce expiry, result expiration, or another service-specific validity rule. | Check the provider’s documented expiry and expired-result behavior. Do not assume a link is perpetual or that every service offers a renewal mechanism. |
| Screenshot options are rejected or ignored | An option may be unsupported on the signed GET endpoint or may require a different request format. | Check the endpoint’s supported query options. For nested options or JSON bodies, use the provider’s documented POST or backend route where available. |
| Unexpected usage or charges | A public URL may have been reused, or the provider may treat cached and uncached requests differently. | Review the provider’s quota, cache, and billing rules; avoid exposing a reusable URL unnecessarily and rotate credentials if the signing secret itself was exposed. |
Or skip the browser setup
If you want a direct screenshot request without implementing a provider-specific signing flow, ScreenshotNeo is a screenshot API and MCP server for developers. For this GET request, use your ScreenshotNeo API key and the target URL:
curl -G "https://api.screenshotneo.com/v1/shot" -d access_key=YOUR_API_KEY --data-urlencode url=https://stripe.com -o shot.webpSee the ScreenshotNeo documentation for request options. ScreenshotNeo says it accepts cookie and consent banners and removes more than 60 known consent platforms, newsletter popups, and chat widgets before capture; each cleanup step can be turned off. Bot checks and CAPTCHAs, blank pages, timeouts, failed loads, and cache hits are not billed, and responses include X-Page-Verdict and X-Billed headers. Its MCP server provides take_screenshot, get_page_info, and capture_pdf tools for AI agents and MCP clients. The Free plan includes 1,000 shots per month with no card; paid plans start at $5 for 3,000 shots.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Sign up for ScreenshotNeo’s free plan to get 1,000 screenshots a month with no card.
Best Value
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
Frequently Asked Questions
Does a signed screenshot URL hide the screenshot request?
No. The URL and its query parameters remain visible to anyone who can access the link. The signing secret is what stays off the public URL.
Can I use the same signing code with different screenshot APIs?
No. Providers can differ in algorithm, signed fields, encoding, ordering, and signature placement; follow the documentation for the API you use.
Do signed URLs always expire?
No. Expiration is a provider-specific feature, not something guaranteed by the phrase “signed URL.”
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesQuick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
