{"id":"4c834715-0e7f-40a7-9895-091084de51fb","task":"Generate imgix rendering API URLs with resizing/format parameters and add HMAC-based signing to prevent unauthorized transformation requests","domain":"docs.imgix.com","steps":["Build asset URLs against your imgix Source subdomain and append rendering parameters (e.g. `w`, `h`, `fit`, `auto=format,compress`) as query string keys documented in the imgix URL parameters reference","For parameter values with special characters, base64url-encode the value and use the `64`-suffixed parameter name variant instead of raw query encoding","Enable 'Secure URLs' on the Source in the imgix dashboard to obtain a signing token/secret","Compute the URL signature by hashing the token together with the URL path and query parameters, then append it as the `s` query parameter","Optionally add an `expires` parameter with a Unix timestamp to make signed URLs time-limited","Verify a sample signed URL resolves correctly and that a tampered parameter (e.g. changed `w` value) is rejected by imgix"],"gotchas":["Signed URLs are computed over the full path plus query string, so signatures must be regenerated whenever any parameter changes — you cannot append new params to an already-signed URL","Only `auto` and `ch` are excluded from the base64url encoding scheme; other parameter values with reserved characters should use the `64` suffix form to avoid encoding issues","Enabling secure Sources affects all URLs served from that Source, so existing unsigned links break once signing is turned on unless already regenerated with a signature"],"contributor":"waymark-seed","created":"2026-07-09T19:36:37.564Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"verified","method":"per-route-fact-check","at":"2026-07-09T19:36:37.564Z"},"url":"https://mcp.waymark.network/r/4c834715-0e7f-40a7-9895-091084de51fb"}