---
url: /orchestration/reference/operations/InvokeModelHashStepTemplate.md
description: 'POST /v2/consumer/recipes/modelHash — ModelHash'
---

> Documentation index: https://developer.civitai.com/llms.txt — every page on this site has a markdown version at its URL + `.md`.

# ModelHash

`POST https://orchestration.civitai.com/v2/consumer/recipes/modelHash`

Operation `InvokeModelHashStepTemplate` · Recipes · Civitai Orchestration API, generated from the published OpenAPI spec ([v2-consumers.json](https://developer.civitai.com/openapi/v2-consumers.json)); the interactive HTML page is this URL without `.md`.

Computes Civitai content hashes (SHA256, AutoV1/2/3, Blake3, CRC32) of a model file.

## Authentication

Send `Authorization: Bearer <token>` (the spec's `ApiKey` scheme); this operation documents `401 Unauthorized` for a missing or invalid token. See [Authentication](https://developer.civitai.com/orchestration/guide/authentication.md).

## Parameters

| Name | In | Type | Required | Description |
|---|---|---|---|---|
| `experimental` | query | boolean | no |  |
| `allowMatureContent` | query | boolean | no |  |
| `whatif` | query | boolean | no |  |
| `ephemeral` | query | boolean | no |  |
| `tier` | query | `WorkflowTier` (one of `paid`, `free`) | no | How a workflow is paid for. |

## Request body

Optional. Content types: `application/json`, `text/json`, `application/*+json`.

Schema `ModelHashInput`.

| Field | Type | Required | Description |
|---|---|---|---|
| `model` | string | yes | (pattern `^(?:urn:)?(?:air:)?(?:(?<ecosystem>[a-zA-Z0-9_\-\/]+):)?(?:(?<type>[a-zA-Z0-9_\-\/]+):)?(?<source>[a-zA-Z0-9_\-\/]+):(?<id>[a-zA-Z0-9_\-\/\.]+)(?:@(?<version>[a-zA-Z0-9_\-\/.=,%+:]+))?(?:\.(?<format>[a-zA-Z0-9_\-]+))?$`) |

## Responses

### 200 OK

Content type: `application/json`.

Schema `ModelHashOutput`.

| Field | Type | Required | Description |
|---|---|---|---|
| `sha256` | string, nullable | no | SHA256 hash of the full file. |
| `autoV1` | string, nullable | no | AutoV1 short hash (8 chars of SHA256 over a 64 KB block starting at 1 MB). |
| `autoV2` | string, nullable | no | AutoV2 short hash (first 10 chars of SHA256). |
| `autoV3` | string, nullable | no | AutoV3 hash (SHA256 of the file with safetensors header metadata stripped). |
| `blake3` | string, nullable | no | Blake3 hash of the full file. |
| `crc32` | string, nullable | no | CRC32 of the full file. |

### 400 Bad Request

Content type: `application/json`.

Schema `ProblemDetails`.

| Field | Type | Required | Description |
|---|---|---|---|
| `type` | string, nullable | no |  |
| `title` | string, nullable | no |  |
| `status` | integer (int32), nullable | no |  |
| `detail` | string, nullable | no |  |
| `instance` | string, nullable | no |  |

### 401 Unauthorized

Content type: `application/json`.

Schema `ProblemDetails` — fields as listed above.

### 403 Forbidden

Content type: `application/json`.

Schema `ProblemDetails` — fields as listed above.