> ## Documentation Index > Fetch the complete documentation index at: https://www.dropfans.io/developers/llms.txt > Use this file to discover all available pages before exploring further. # GET /api/external/v1/drops/{id} — Read back a drop > One drop you created: price, moderation status (overall and per media item), checkout URL, whether previews are attached, and a sales summary. - Source: https://www.dropfans.io/developers/reference/get-drop - Section: API reference - OpenAPI: https://www.dropfans.io/developers/openapi.json Also served at `/api/external/drops/{id}` (the unversioned alias). One drop you created: price, moderation status (overall and per media item), checkout URL, whether previews are attached, and a sales summary. `salesCount` counts paid orders **excluding refunds and chargebacks** — stricter than [check-status](https://www.dropfans.io/developers/reference/check-drop-status.md), which does not exclude them. Use this endpoint to verify a drop went APPROVED before attaching it to a post, and to see which media items still lack a baked preview. ## Authentication `Authorization: Bearer dpfn_...` — an API key generated in the dashboard (Vault → API Connect). By default the key acts for the one account it belongs to. Missing or invalid keys return 401 `{"error":"Unauthorized","code":"unauthorized"}`. **For a creator you manage or onboarded:** `GET /api/external/v1/creators/{creatorId}/drops/{id}` — with a verified agency's own key for a creator or AI persona it manages, or your app owner's own key for an account your app onboarded (ids from GET /api/external/v1/creators); for a managed creator the agency needs `canManageDrops`. The response echoes the account acted on in `X-Dropfans-Account`. Sending `X-Dropfans-Account: ` on the plain path still works but is deprecated. ## Path parameters | Field | Type | Required | Description | |---|---|---|---| | `id` | string | yes | The product (drop) id from create-drop. | ## Responses ### 200 The drop. | Field | Type | Required | Description | |---|---|---|---| | `id` | string | yes | The product (drop) id. | | `name` | string \\| null | | Drop title. Null when created without a name. | | `price` | number | yes | USD **dollars**. 0 means free. | | `currency` | `USD` | yes | Always "USD". | | `status` | `PENDING` \\| `APPROVED` \\| `REJECTED` \\| `FLAGGED` | yes | The drop’s overall moderation status. A drop built from already-APPROVED vault items is APPROVED at creation. | | `moderationReason` | string \\| null | | Why the drop was rejected or flagged. Null otherwise. | | `buyUrl` | string | yes | With an app key: your app’s plain buy link id (`/buy/{linkId}`) — created by POST /drops; reads return it when it exists, else `/buy/{productId}` (a drop your app created still counts for it). With a personal key: `/buy/{productId}`. For a per-fan reference, create a link with POST /api/external/v1/links. | | `linkId` | string \\| null | | The link id in buyUrl (app keys only); comes back as linkId on the sale. | | `allowDownload` | boolean | yes | Images only: whether buyers get a Download button serving a watermarked, metadata-stripped JPEG. Videos are never downloadable (DRM stream). Defaults to false. | | `mediaCount` | integer | yes | Number of media items attached. | | `media` | object[] | yes | Attached media in display order. | | `salesCount` | integer | yes | Paid orders, excluding refunds and chargebacks (stricter than check-status, which does NOT exclude refunds). | | `lastSaleAt` | string \\| null | | When the newest counted sale was paid. Null when never sold. | | `createdAt` | string | yes | Creation time. | ```json { "id": "clxdr0p000001prod", "name": "Beach set — 6 photos", "price": 25, "currency": "USD", "status": "APPROVED", "moderationReason": null, "buyUrl": "https://www.dropfans.io/buy/clxdr0p000001prod", "allowDownload": false, "mediaCount": 3, "media": [ { "vaultItemId": "clxv1a2b30001item", "order": 0, "fileType": "image", "moderationStatus": "APPROVED", "hasPreview": true }, { "vaultItemId": "clxv1a2b30002item", "order": 1, "fileType": "image", "moderationStatus": "APPROVED", "hasPreview": true }, { "vaultItemId": "clxv1a2b30003item", "order": 2, "fileType": "video", "moderationStatus": "APPROVED", "hasPreview": false } ], "salesCount": 2, "lastSaleAt": "2026-08-18T21:03:00.000Z", "createdAt": "2026-08-15T09:00:00.000Z" } ``` ## Errors | Status | Body | When | |---|---|---| | 401 | `{"error":"Unauthorized","code":"unauthorized"}` | Missing or invalid API key. | | 404 | `{"error":"Drop not found"}` | No such drop on this account (another creator’s drop also 404s — never 403). | | 400 | `{"error":"X-Dropfans-Account must be an account id (from GET /api/external/agency/creators), not a username.","code":"invalid_account_header"}` | `X-Dropfans-Account` is not an account id. | | 400 | `{"error":"X-Dropfans-Account names a different account than the path — send one or the other.","code":"account_mismatch"}` | Called under /v1/creators/{creatorId}/ with an `X-Dropfans-Account` naming another account. | | 403 | `{"error":"This key cannot act for that account.","code":"account_not_managed"}` | The creator in the path (or `X-Dropfans-Account`) is one this key cannot act for: no ACCEPTED management by your agency and not an account your app onboarded (or it no longer holds a key bound to your app), a key minted for one creator, or someone is suspended, banned or deleted. An unknown id gets the same answer. | | 403 | `{"error":"The agency does not have permission for this on that account.","code":"permission_denied","permission":"canManageDrops"}` | For a managed creator: the agency lacks `canManageDrops` on that account. | | 403 | `{"error":"This app does not have the drops API category enabled. Contact support to enable it.","code":"api_category_disabled","category":"drops"}` | Your app has the Drops & checkout links [API category](https://www.dropfans.io/developers/concepts/api-categories.md) switched off. | ## Rate limiting Per-key fixed windows by tier (Personal 60/min · 5,000/day; approved apps 300/min · 50,000/day; Dropfans-operated integrations exempt). Read the live values from X-RateLimit-Tier, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset and their -Day variants; a 429 carries Retry-After and `{"error":"Rate limit exceeded","code":"rate_limited"}`. See [Rate limits](https://www.dropfans.io/developers/concepts/rate-limits.md). ## Code samples ### curl ```bash curl "https://www.dropfans.io/api/external/v1/drops/$PRODUCT_ID" \ -H "Authorization: Bearer $DROPFANS_API_KEY" ``` ### Node ```javascript const productId = '…'; // from an earlier response const res = await fetch(`https://www.dropfans.io/api/external/v1/drops/${productId}`, { headers: { Authorization: `Bearer ${process.env.DROPFANS_API_KEY}`, }, }); console.log(await res.json()); ``` ### Python ```python import os import requests product_id = "…" # from an earlier response res = requests.get( f"https://www.dropfans.io/api/external/v1/drops/{product_id}", headers={"Authorization": f"Bearer {os.environ['DROPFANS_API_KEY']}"}, ) print(res.json()) ``` ## OpenAPI ```json { "method": "GET", "path": "/api/external/v1/drops/{id}", "operationId": "getDrop", "tags": [ "drops" ], "summary": "Read back a drop", "description": "One drop you created: price, moderation status (overall and per media item), checkout URL, whether previews are attached, and a sales summary.\n\n`salesCount` counts paid orders **excluding refunds and chargebacks** — stricter than [check-status](https://www.dropfans.io/developers/reference/check-drop-status.md), which does not exclude them. Use this endpoint to verify a drop went APPROVED before attaching it to a post, and to see which media items still lack a baked preview.", "parameters": [ { "name": "id", "in": "path", "required": true, "description": "The product (drop) id from create-drop.", "schema": { "type": "string" }, "example": "clxdr0p000001prod" }, { "name": "X-Dropfans-Account", "in": "header", "required": false, "deprecated": true, "description": "Deprecated: call the …ForCreator operation (/api/external/v1/creators/{creatorId}/…) instead; the header keeps working and such responses carry Deprecation and Link: rel=\"successor-version\". With a verified agency’s own key, the id of a creator or AI persona the agency manages (from GET /api/external/v1/agency/creators): the request then acts as that account, exactly as if it were sent with that account’s own key. Account ids only — usernames are refused (400 invalid_account_header). Checked on every request: the management must be ACCEPTED, nobody may be suspended, banned or deleted (else 403 account_not_managed), and the agency needs the endpoint’s permission on that account (else 403 permission_denied). Omit it to act as the key’s own account.", "schema": { "type": "string", "pattern": "^c[a-z0-9]{20,32}$" }, "example": "cmh4v2q8k0003xy9z7w6v5u4t" } ], "responses": { "200": { "description": "The drop.", "headers": { "X-RateLimit-Tier": { "description": "Rate-limit tier of the key: personal, app or first_party (first_party is unlimited).", "schema": { "type": "string", "enum": [ "personal", "app", "first_party" ] } }, "X-RateLimit-Limit": { "description": "Requests allowed per minute for this key (absent on first_party).", "schema": { "type": "integer" } }, "X-RateLimit-Remaining": { "description": "Requests left in the current minute window.", "schema": { "type": "integer" } }, "X-RateLimit-Reset": { "description": "Epoch seconds when the minute window resets.", "schema": { "type": "integer" } }, "X-RateLimit-Limit-Day": { "description": "Requests allowed per UTC day for this key (absent on first_party).", "schema": { "type": "integer" } }, "X-RateLimit-Remaining-Day": { "description": "Requests left in the current UTC day window.", "schema": { "type": "integer" } }, "X-RateLimit-Reset-Day": { "description": "Epoch seconds when the day window resets.", "schema": { "type": "integer" } }, "X-Dropfans-Account": { "description": "The id of the account this request acted on — the key’s own account, or the managed account named in the X-Dropfans-Account request header. Assert it when acting for several accounts.", "schema": { "type": "string" } } }, "content": { "application/json": { "schema": { "type": "object", "properties": { "id": { "type": "string", "description": "The product (drop) id.", "example": "clxdr0p000001prod" }, "name": { "type": [ "string", "null" ], "description": "Drop title. Null when created without a name.", "example": "Beach set — 6 photos" }, "price": { "type": "number", "description": "USD **dollars**. 0 means free.", "example": 25 }, "currency": { "type": "string", "description": "Always \"USD\".", "enum": [ "USD" ] }, "status": { "type": "string", "description": "The drop’s overall moderation status. A drop built from already-APPROVED vault items is APPROVED at creation.", "enum": [ "PENDING", "APPROVED", "REJECTED", "FLAGGED" ] }, "moderationReason": { "type": [ "string", "null" ], "description": "Why the drop was rejected or flagged. Null otherwise." }, "buyUrl": { "type": "string", "description": "With an app key: your app’s plain buy link id (`/buy/{linkId}`) — created by POST /drops; reads return it when it exists, else `/buy/{productId}` (a drop your app created still counts for it). With a personal key: `/buy/{productId}`. For a per-fan reference, create a link with POST /api/external/v1/links.", "format": "uri", "example": "https://www.dropfans.io/buy/clxdr0p000001prod" }, "linkId": { "type": [ "string", "null" ], "description": "The link id in buyUrl (app keys only); comes back as linkId on the sale.", "example": "q7m2c8zk4w" }, "allowDownload": { "type": "boolean", "description": "Images only: whether buyers get a Download button serving a watermarked, metadata-stripped JPEG. Videos are never downloadable (DRM stream). Defaults to false." }, "mediaCount": { "type": "integer", "description": "Number of media items attached.", "example": 6 }, "media": { "type": "array", "items": { "type": "object", "properties": { "vaultItemId": { "type": "string", "description": "The source vault item." }, "order": { "type": "integer", "description": "Display position (0-based)." }, "fileType": { "type": "string", "description": "Media kind.", "enum": [ "image", "video", "audio" ] }, "moderationStatus": { "type": "string", "description": "Per-item moderation status.", "enum": [ "PENDING", "APPROVED", "REJECTED", "FLAGGED" ] }, "hasPreview": { "type": "boolean", "description": "True once a baked blur preview was attached via POST /api/external/v1/drops/{id}/previews." } }, "required": [ "vaultItemId", "order", "fileType", "moderationStatus", "hasPreview" ], "description": "One attached vault item." }, "description": "Attached media in display order." }, "salesCount": { "type": "integer", "description": "Paid orders, excluding refunds and chargebacks (stricter than check-status, which does NOT exclude refunds).", "example": 2 }, "lastSaleAt": { "type": [ "string", "null" ], "description": "When the newest counted sale was paid. Null when never sold.", "format": "date-time" }, "createdAt": { "type": "string", "description": "Creation time.", "format": "date-time" } }, "required": [ "id", "price", "currency", "status", "buyUrl", "allowDownload", "mediaCount", "media", "salesCount", "createdAt" ] }, "example": { "id": "clxdr0p000001prod", "name": "Beach set — 6 photos", "price": 25, "currency": "USD", "status": "APPROVED", "moderationReason": null, "buyUrl": "https://www.dropfans.io/buy/clxdr0p000001prod", "allowDownload": false, "mediaCount": 3, "media": [ { "vaultItemId": "clxv1a2b30001item", "order": 0, "fileType": "image", "moderationStatus": "APPROVED", "hasPreview": true }, { "vaultItemId": "clxv1a2b30002item", "order": 1, "fileType": "image", "moderationStatus": "APPROVED", "hasPreview": true }, { "vaultItemId": "clxv1a2b30003item", "order": 2, "fileType": "video", "moderationStatus": "APPROVED", "hasPreview": false } ], "salesCount": 2, "lastSaleAt": "2026-08-18T21:03:00.000Z", "createdAt": "2026-08-15T09:00:00.000Z" } } } }, "400": { "description": "`X-Dropfans-Account` is not an account id. Also: Called under /v1/creators/{creatorId}/ with an `X-Dropfans-Account` naming another account.", "headers": { "X-RateLimit-Tier": { "description": "Rate-limit tier of the key: personal, app or first_party (first_party is unlimited).", "schema": { "type": "string", "enum": [ "personal", "app", "first_party" ] } }, "X-RateLimit-Limit": { "description": "Requests allowed per minute for this key (absent on first_party).", "schema": { "type": "integer" } }, "X-RateLimit-Remaining": { "description": "Requests left in the current minute window.", "schema": { "type": "integer" } }, "X-RateLimit-Reset": { "description": "Epoch seconds when the minute window resets.", "schema": { "type": "integer" } }, "X-RateLimit-Limit-Day": { "description": "Requests allowed per UTC day for this key (absent on first_party).", "schema": { "type": "integer" } }, "X-RateLimit-Remaining-Day": { "description": "Requests left in the current UTC day window.", "schema": { "type": "integer" } }, "X-RateLimit-Reset-Day": { "description": "Epoch seconds when the day window resets.", "schema": { "type": "integer" } } }, "content": { "application/json": { "schema": { "type": "object", "properties": { "error": { "type": "string", "description": "Human-readable message.", "example": "Rate limit exceeded" }, "code": { "type": "string", "description": "Machine-readable code: unauthorized, app_suspended, first_party_only, api_category_disabled, rate_limited, username_required, invalid_account_header, account_not_managed, permission_denied, account_header_not_allowed, agency_key_required — plus endpoint-specific codes listed on each reference page.", "example": "rate_limited" } }, "required": [ "error", "code" ] }, "example": { "error": "X-Dropfans-Account must be an account id (from GET /api/external/agency/creators), not a username.", "code": "invalid_account_header" } } } }, "401": { "description": "Missing or invalid API key.", "headers": { "X-RateLimit-Tier": { "description": "Rate-limit tier of the key: personal, app or first_party (first_party is unlimited).", "schema": { "type": "string", "enum": [ "personal", "app", "first_party" ] } }, "X-RateLimit-Limit": { "description": "Requests allowed per minute for this key (absent on first_party).", "schema": { "type": "integer" } }, "X-RateLimit-Remaining": { "description": "Requests left in the current minute window.", "schema": { "type": "integer" } }, "X-RateLimit-Reset": { "description": "Epoch seconds when the minute window resets.", "schema": { "type": "integer" } }, "X-RateLimit-Limit-Day": { "description": "Requests allowed per UTC day for this key (absent on first_party).", "schema": { "type": "integer" } }, "X-RateLimit-Remaining-Day": { "description": "Requests left in the current UTC day window.", "schema": { "type": "integer" } }, "X-RateLimit-Reset-Day": { "description": "Epoch seconds when the day window resets.", "schema": { "type": "integer" } } }, "content": { "application/json": { "schema": { "type": "object", "properties": { "error": { "type": "string", "description": "Human-readable message.", "example": "Rate limit exceeded" }, "code": { "type": "string", "description": "Machine-readable code: unauthorized, app_suspended, first_party_only, api_category_disabled, rate_limited, username_required, invalid_account_header, account_not_managed, permission_denied, account_header_not_allowed, agency_key_required — plus endpoint-specific codes listed on each reference page.", "example": "rate_limited" } }, "required": [ "error", "code" ] }, "example": { "error": "Unauthorized", "code": "unauthorized" } } } }, "403": { "description": "The creator in the path (or `X-Dropfans-Account`) is one this key cannot act for: no ACCEPTED management by your agency and not an account your app onboarded (or it no longer holds a key bound to your app), a key minted for one creator, or someone is suspended, banned or deleted. An unknown id gets the same answer. Also: For a managed creator: the agency lacks `canManageDrops` on that account. Also: Your app has the Drops & checkout links [API category](https://www.dropfans.io/developers/concepts/api-categories.md) switched off.", "headers": { "X-RateLimit-Tier": { "description": "Rate-limit tier of the key: personal, app or first_party (first_party is unlimited).", "schema": { "type": "string", "enum": [ "personal", "app", "first_party" ] } }, "X-RateLimit-Limit": { "description": "Requests allowed per minute for this key (absent on first_party).", "schema": { "type": "integer" } }, "X-RateLimit-Remaining": { "description": "Requests left in the current minute window.", "schema": { "type": "integer" } }, "X-RateLimit-Reset": { "description": "Epoch seconds when the minute window resets.", "schema": { "type": "integer" } }, "X-RateLimit-Limit-Day": { "description": "Requests allowed per UTC day for this key (absent on first_party).", "schema": { "type": "integer" } }, "X-RateLimit-Remaining-Day": { "description": "Requests left in the current UTC day window.", "schema": { "type": "integer" } }, "X-RateLimit-Reset-Day": { "description": "Epoch seconds when the day window resets.", "schema": { "type": "integer" } } }, "content": { "application/json": { "schema": { "type": "object", "properties": { "error": { "type": "string", "description": "Human-readable message.", "example": "Rate limit exceeded" }, "code": { "type": "string", "description": "Machine-readable code: unauthorized, app_suspended, first_party_only, api_category_disabled, rate_limited, username_required, invalid_account_header, account_not_managed, permission_denied, account_header_not_allowed, agency_key_required — plus endpoint-specific codes listed on each reference page.", "example": "rate_limited" } }, "required": [ "error", "code" ] }, "example": { "error": "This key cannot act for that account.", "code": "account_not_managed" } } } }, "404": { "description": "No such drop on this account (another creator’s drop also 404s — never 403).", "headers": { "X-RateLimit-Tier": { "description": "Rate-limit tier of the key: personal, app or first_party (first_party is unlimited).", "schema": { "type": "string", "enum": [ "personal", "app", "first_party" ] } }, "X-RateLimit-Limit": { "description": "Requests allowed per minute for this key (absent on first_party).", "schema": { "type": "integer" } }, "X-RateLimit-Remaining": { "description": "Requests left in the current minute window.", "schema": { "type": "integer" } }, "X-RateLimit-Reset": { "description": "Epoch seconds when the minute window resets.", "schema": { "type": "integer" } }, "X-RateLimit-Limit-Day": { "description": "Requests allowed per UTC day for this key (absent on first_party).", "schema": { "type": "integer" } }, "X-RateLimit-Remaining-Day": { "description": "Requests left in the current UTC day window.", "schema": { "type": "integer" } }, "X-RateLimit-Reset-Day": { "description": "Epoch seconds when the day window resets.", "schema": { "type": "integer" } } }, "content": { "application/json": { "schema": { "type": "object", "properties": { "error": { "type": "string", "description": "Human-readable message describing what went wrong.", "example": "Vault item not found" } }, "required": [ "error" ] }, "example": { "error": "Drop not found" } } } }, "429": { "description": "Rate limit exceeded for the current minute or day window. Wait Retry-After seconds and retry.", "headers": { "X-RateLimit-Tier": { "description": "Rate-limit tier of the key: personal, app or first_party (first_party is unlimited).", "schema": { "type": "string", "enum": [ "personal", "app", "first_party" ] } }, "X-RateLimit-Limit": { "description": "Requests allowed per minute for this key (absent on first_party).", "schema": { "type": "integer" } }, "X-RateLimit-Remaining": { "description": "Requests left in the current minute window.", "schema": { "type": "integer" } }, "X-RateLimit-Reset": { "description": "Epoch seconds when the minute window resets.", "schema": { "type": "integer" } }, "X-RateLimit-Limit-Day": { "description": "Requests allowed per UTC day for this key (absent on first_party).", "schema": { "type": "integer" } }, "X-RateLimit-Remaining-Day": { "description": "Requests left in the current UTC day window.", "schema": { "type": "integer" } }, "X-RateLimit-Reset-Day": { "description": "Epoch seconds when the day window resets.", "schema": { "type": "integer" } }, "Retry-After": { "description": "Seconds to wait before retrying (sent with 429s).", "schema": { "type": "integer" } } }, "content": { "application/json": { "schema": { "type": "object", "properties": { "error": { "type": "string", "description": "Human-readable message.", "example": "Rate limit exceeded" }, "code": { "type": "string", "description": "Machine-readable code: unauthorized, app_suspended, first_party_only, api_category_disabled, rate_limited, username_required, invalid_account_header, account_not_managed, permission_denied, account_header_not_allowed, agency_key_required — plus endpoint-specific codes listed on each reference page.", "example": "rate_limited" } }, "required": [ "error", "code" ] }, "example": { "error": "Rate limit exceeded", "code": "rate_limited" } } } } }, "x-codeSamples": [ { "lang": "cURL", "label": "curl", "source": "curl \"https://www.dropfans.io/api/external/v1/drops/$PRODUCT_ID\" \\\n -H \"Authorization: Bearer $DROPFANS_API_KEY\"" }, { "lang": "JavaScript", "label": "Node", "source": "const productId = '…'; // from an earlier response\n\nconst res = await fetch(`https://www.dropfans.io/api/external/v1/drops/${productId}`, {\n headers: {\n Authorization: `Bearer ${process.env.DROPFANS_API_KEY}`,\n },\n});\nconsole.log(await res.json());" }, { "lang": "Python", "source": "import os\nimport requests\n\nproduct_id = \"…\" # from an earlier response\n\nres = requests.get(\n f\"https://www.dropfans.io/api/external/v1/drops/{product_id}\",\n headers={\"Authorization\": f\"Bearer {os.environ['DROPFANS_API_KEY']}\"},\n)\nprint(res.json())" } ], "x-dropfans-docs": "https://www.dropfans.io/developers/reference/get-drop", "x-dropfans-category": "drops", "x-dropfans-agency-permission": "canManageDrops" } ``` --- Previous: [List the creator’s drops](https://www.dropfans.io/developers/reference/list-drops.md) · Next: [Edit a drop](https://www.dropfans.io/developers/reference/update-drop.md) · All pages: [llms.txt](https://www.dropfans.io/developers/llms.txt)