API reference

Read the creator’s public profile

The creator's public profile: username, display name, bio, visibility, contact handles and images.

View as MarkdownUpdated Oct 26, 2026

GET/api/external/v1/profilealso served at /api/external/profileNew

The creator's public profile: username, display name, bio, visibility, contact handles and images.

Image URLs are signed and valid for 24 hours — fetch them when you need them, don't store them. Change any of it with PATCH /api/external/v1/profile.

Authentication

Send the creator's API key as a bearer token: Authorization: Bearer dpfn_…. See Authentication & API keys.

For a creator you manage or onboarded

GET /api/external/v1/creators/{creatorId}/profile — an agency's own key for a creator or AI persona it manages, or your app owner's own key for an account your app onboarded. The X-Dropfans-Account header still works but is deprecated. See Acting for a creator.

Responses

200The profile.

Name	Type	Description
`id`	string	The account’s user id.
`username`	string \| null	Public @handle, without the @.
`displayName`	string \| null	Display name.
`bio`	string \| null	Profile bio.
`profileVisible`	boolean	Whether the public profile is visible.
`location`	string \| null	Free-text location.
`websiteUrl`	string \| null	Website link.
`twitterHandle`	string \| null	X / Twitter handle.
`instagramHandle`	string \| null	Instagram handle.
`tiktokHandle`	string \| null	TikTok handle.
`snapchatHandle`	string \| null	Snapchat handle.
`threadsHandle`	string \| null	Threads handle.
`youtubeHandle`	string \| null	YouTube handle.
`telegramHandle`	string \| null	Telegram handle.
`whatsappNumber`	string \| null	WhatsApp number.
`imessageHandle`	string \| null	iMessage handle.
`primaryContactPlatform`	string \| null	Which contact platform the profile highlights.
`avatarUrl`	string \| null	Profile image. Signed URL, valid 24 hours — do not store it. Format: uri
`bannerUrl`	string \| null	Banner image. Signed URL, valid 24 hours — do not store it. Format: uri
`avatarModerationStatus`	string \| null	PENDING, APPROVED, REJECTED or FLAGGED for the profile image (a new image shows once approved); null when there is none.
`bannerModerationStatus`	string \| null	PENDING, APPROVED, REJECTED or FLAGGED for the banner image; null when there is none.

Example response

{
  "id": "cmh4v2q8k0003xy9z7w6v5u4t",
  "username": "luna_ai",
  "displayName": "Luna",
  "bio": "Your favourite AI muse ✨",
  "profileVisible": true,
  "location": null,
  "websiteUrl": null,
  "twitterHandle": null,
  "instagramHandle": "luna.ai",
  "tiktokHandle": null,
  "snapchatHandle": null,
  "threadsHandle": null,
  "youtubeHandle": null,
  "telegramHandle": "luna_ai",
  "whatsappNumber": null,
  "imessageHandle": null,
  "primaryContactPlatform": "telegram",
  "avatarUrl": "https://cdn.dropfans.io/luna_ai/profile.jpg?token=…",
  "bannerUrl": null,
  "avatarModerationStatus": "APPROVED",
  "bannerModerationStatus": null
}

Errors

Status	Body	When
401	`{"error":"Unauthorized","code":"unauthorized"}`	Missing or invalid API key.
404	`{"error":"Account not found"}`	The account no longer exists.
400	`{"error":"X-Dropfans-Account must be an account id (from GET /api/external/agency/creators), not a username.","code":"invalid_account_header"}`	`X-Dropfans-Account` is not an account id.
400	`{"error":"X-Dropfans-Account names a different account than the path — send one or the other.","code":"account_mismatch"}`	Called under /v1/creators/{creatorId}/ with an `X-Dropfans-Account` naming another account.
403	`{"error":"This key cannot act for that account.","code":"account_not_managed"}`	The creator in the path (or `X-Dropfans-Account`) is one this key cannot act for: no ACCEPTED management by your agency and not an account your app onboarded (or it no longer holds a key bound to your app), a key minted for one creator, or someone is suspended, banned or deleted. An unknown id gets the same answer.

Rate limiting

Every response carries the X-RateLimit-Tier header and, on limited tiers, the per-minute and per-day trios — read X-RateLimit-Remaining and X-RateLimit-Reset instead of hardcoding limits. Details in Rate limits.

Code samples

curl "https://www.dropfans.io/api/external/v1/profile" \
  -H "Authorization: Bearer $DROPFANS_API_KEY"

const res = await fetch(`https://www.dropfans.io/api/external/v1/profile`, {
  headers: {
    Authorization: `Bearer ${process.env.DROPFANS_API_KEY}`,
  },
});
console.log(await res.json());

import os
import requests

res = requests.get(
    "https://www.dropfans.io/api/external/v1/profile",
    headers={"Authorization": f"Bearer {os.environ['DROPFANS_API_KEY']}"},
)
print(res.json())

← Previous

Which creator this API key belongs to

Update the creator’s public profile

Questions? support@dropfans.io