diff --git a/api/consts/consts.go b/api/consts/consts.go
index 38ae7b2a..35b5a644 100644
--- a/api/consts/consts.go
+++ b/api/consts/consts.go
@@ -51,6 +51,7 @@ const (
 	DefaultMomentTextKey             = "default_moment_text"
 	MaxDailyZoneMomentCreateTimesKey = "max_daily_zone_moment_create_times"
 	ReferentialZoneMomentKey         = "referential_zone_moment"
+	IsMomentImageEncryptEnabledKey   = "is_moment_image_encrypt_enabled"
 )
 
 // del_flag
diff --git a/app/mix/controller/config_op.go b/app/mix/controller/config_op.go
index 212caf2d..01daf725 100644
--- a/app/mix/controller/config_op.go
+++ b/app/mix/controller/config_op.go
@@ -70,3 +70,14 @@ func OpGetUploadMediaFailConfigList(ctx *gin.Context) {
 
 	ReplyOk(ctx, config)
 }
+
+func OpGetIsMomentImageEncryptEnabled(ctx *gin.Context) {
+	isEnabled, ec := service.DefaultConfigService.OpGetIsMomentImageEncryptEnabled(ctx)
+	if ec != errcode.ErrCodeOk {
+		logger.Error("OpGetIsMomentImageEncryptEnabled fail, ec: %v", ec)
+		ReplyErrCodeMsg(ctx, ec)
+		return
+	}
+
+	ReplyOk(ctx, isEnabled)
+}
diff --git a/app/mix/controller/init.go b/app/mix/controller/init.go
index 2f8d2271..3d998f09 100644
--- a/app/mix/controller/init.go
+++ b/app/mix/controller/init.go
@@ -114,6 +114,7 @@ func Init(r *gin.Engine) {
 	apiMomentGroup.POST("thumbs_up", middleware.JSONParamValidator(momentproto.ApiThumbsUpReq{}), middleware.JwtAuthenticator(), ApiThumbsUpMoment)
 	apiMomentGroup.POST("list_by_ids", middleware.JSONParamValidator(momentproto.ApiListByIdsReq{}), middleware.JwtAuthenticator(), ApiGetMomentListByIds)
 	apiMomentGroup.POST("recomm_list", middleware.JSONParamValidator(momentproto.ApiRecommListReq{}), middleware.JwtAuthenticator(), ApiGetMomentRecommList)
+	apiMomentGroup.POST("is_moment_image_encrypt_enabled", middleware.JSONParamValidator(base.BaseRequest{}), middleware.JwtAuthenticator(), OpGetIsMomentImageEncryptEnabled)
 
 	// 足迹
 	// apiFootPrintGroup := r.Group("/api/footprint", PrepareToC())
diff --git a/app/mix/service/configservice.go b/app/mix/service/configservice.go
index 8b20ca92..19d86772 100644
--- a/app/mix/service/configservice.go
+++ b/app/mix/service/configservice.go
@@ -169,3 +169,18 @@ func (s *ConfigService) OpGetUploadMediaFailConfigList(ctx *gin.Context) (upload
 
 	return
 }
+
+func (s *ConfigService) OpGetIsMomentImageEncryptEnabled(ctx *gin.Context) (isEnabled int64, ec errcode.ErrCode) {
+	ec = errcode.ErrCodeOk
+
+	isMomentImageEncryptEnabled, err := apollo.GetIntValue(consts.IsMomentImageEncryptEnabledKey, apollo.ApolloOpts().SetNamespace("application"))
+	if err != nil {
+		logger.Error("Apollo read failed : %v", err)
+		ec = errcode.ErrCodeApolloReadFail
+		return
+	}
+
+	isEnabled = int64(isMomentImageEncryptEnabled)
+
+	return
+}