Upload your logo
Partner key only. multipart/form-data with the field file: PNG, JPEG or WebP (read from the file’s bytes), at most 2 MB. The file is stored at LettBestilt and becomes logoUrl in the same call. The previous logo file is removed only if it was itself uploaded here by you (through the API or LettBestilt MCP).
An optional text field expectedUpdatedAt gives 409 CHANGED instead of overwriting a change made in between. Content-Length is required. At most 10 uploads per hour per partner, shared by both logos. The key must be created by an owner or administrator (403 KEY_ROLE_FORBIDDEN).
Authentication
The partner key (lbp_test_… or lbp_live_…), sent as Authorization: Bearer lbp_… and created in LettBestilt Partner under Partner key. It belongs to the whole partner, not to a restaurant, and only works against /api/v1/partner. Server to server only: a request with an Origin header is rejected with 403 FORBIDDEN, and the key must never be in a browser. A TEST key sees and creates only sandboxes; LIVE keys work once LettBestilt Partner is open. A suspended or archived partner, a revoked key and a restaurant key (lbs_…) here give 401 UNAUTHORIZED; an expired key gives 401 KEY_EXPIRED.
Request
Optional text field: updatedAt from GET /brand. If the partner has changed since, 409 CHANGED, and the file is not stored.

