diff --git a/packages/server/helpers/eta.js b/packages/server/helpers/eta.js
index b0053be..5393893 100644
--- a/packages/server/helpers/eta.js
+++ b/packages/server/helpers/eta.js
@@ -108,20 +108,26 @@ async function injectStore(name) {
 
 
 /**
- *  getting url for assets of directus api
+ *  mediaUrl - create url for assets from directus,
+ *  default options are with access_token for permissions
  *
- *  @param  string string
- *  @param  array array
- *  @return string
+ *
+ *  @param  {String} id
+ *  @param  {Object} options
+ *  @return {String}
  *
  */
-function mediaUrl(id, options = null)
+function mediaUrl(id, options = {})
 {
-    let query = '';
+    let query
 
-    if (options) {
-        query = '?' + new URLSearchParams(options).toString();
-    }
+    // merge options, default is access_token
+    options = Object.assign({
+        'access_token': process.env.DIRECTUS_API_TOKEN
+    }, options)
+
+    // create query
+    query = '?' + new URLSearchParams(options).toString();
 
     return process.env.DIRECTUS_API_URL + '/assets/' + id + query;
 }