Loading the SOTA2 catalog…
Palette API
Developer platform to generate images, videos, music, and image tools from third-party apps using API keys.
What is Palette API?
Developer platform to generate images, videos, music, and image tools from third-party apps using API keys. Shares the same Studio credit balance as the web interface.
Product typeModel APIs & Gateways
Pricing$0.01 / credit · Usage Based, Enterprise Custom
Deployment
APIAvailable
What teams use Palette API for
Generate, edit, and storyboard multimodal content on one canvas
Brand kits
Storyboard to sequence
Real-time collaboration
Performance direction
Auto-repurpose
Developer platform for programmatic generation
Integrations and access
Platforms, integrations, and language support vary by plan and region. Confirm final requirements with the vendor.
Platforms
IntegrationsAPI and webhooks
Languages
Support
What reviewers say
Community reviewsReviews are owned and editable by their authors.
Sign in to reviewLoading community reviews…
Enterprise readiness
Compliance claims are normalized from current vendor documentation and independently reviewed by SOTA2.
SAML
OIDC
AES-256 at rest encryption
TLS 1.2+ in transit encryption
EU SCCs for EEA/UK/Swiss data transfers
TLS 1.2+ in transit encryption
AES-256 at rest encryption
Cloud provider KMS key management with rotation and access controls
Multi-tenant architecture with strict logical tenant isolation
Role-based access control (RBAC) across UI, API, and AI agents
Enterprise SSO via SAML and OIDC
Multi-factor authentication with enforcement option
Time-limited sessions
Principle of least privilege across infrastructure
Component-level data access minimization
Per-request tenant context enforcement at data access layer
AI agents scoped to requesting user/workflow permissions
Prompts not used to train public foundation models
Model providers contractually prohibited from training on customer data
Agent action logging with attribution; sensitive actions can require human approval
Audit logs of significant events (authentication, permission changes, data access, agent actions)
Security-relevant log anomaly monitoring
Customer access to own workspace audit logs
Regular encrypted backups
Disaster recovery plan with defined recovery objectives; regular restore testing
Redundant availability zone deployment
Regular patching and vulnerability scanning
Independent periodic penetration testing
Responsible vulnerability disclosure program
Incident response plan with defined roles, severity levels, and escalation paths
Customer breach notification without undue delay
Secure SDLC: code review, automated testing, security checks before release
Separation of development, staging, and production environments
Restricted production access with strong engineering authentication
Data retention:
Benchmarks and comparisons
Independent benchmarksStructured task results are being verified.
Side-by-side comparisonsComparison workspaces will be available in a later release.
