The OnlyFans API for agencies and developers. Use it from Claude and ChatGPT, or build on the typed REST API underneath.
- Hosted MCP server with 174 tools at
https://api.ofmapi.com/mcp/v1/. Connect Claude or ChatGPT with OAuth, or Cursor and VS Code with a scope-limited API key, and ask about fans, messages, and earnings in plain English. Creators can be referenced by name or @handle. - Typed REST API with a generated OpenAPI 3.1 contract and an interactive reference you can try without logging in.
- Signed webhooks (HMAC-SHA256) with retries and delivery history, and a customer WebSocket for live events.
- Client generation recipes for Python, TypeScript, and Go, plus n8n and Zapier guides.
- Free during the public Beta. No card required; documented usage limits apply, including 100 MCP tool calls per calendar month.
# 1. Sign up (free) and create an API key
# https://app.ofmapi.com/api-keys
# 2. Make your first call
curl https://api.ofmapi.com/v1/accounts \
-H "Authorization: Bearer $OFMAPI_KEY"- Quickstart: https://ofmapi.com/docs/quickstart
- MCP setup: https://ofmapi.com/docs/integrations/mcp
- Interactive API reference: https://ofmapi.com/docs/api
| Repository | What it is |
|---|---|
| postman-collection | Postman collection generated from the OpenAPI spec |
| ofmapi-mcp | Docs and issues for the hosted MCP server |
| examples | Code examples (being added) |
| onlyfans-py | Python SDK (planned; generate a client from the spec today) |
| onlyfans-node | TypeScript SDK (planned; generate a client from the spec today) |
| onlyfans-go | Go SDK (planned; generate a client from the spec today) |
| n8n-nodes-ofmapi | n8n community node (planned; HTTP Request guide today) |
| ofmapi-docs | Documentation issues and requests |
- Traffic is sent over TLS. Connected-account session material is retained server-side with restricted filesystem access, is not returned through customer account APIs, and is not currently encrypted at rest.
- API keys are stored as Argon2 hashes; the plaintext is shown once.
- Webhook payloads are signed with HMAC-SHA256 and carry replay protection.
- OFMAPI is not currently SOC 2 certified. OnlyFans can still challenge or reject automation; OFMAPI does not guarantee that a connected account will avoid restrictions.
Details: https://ofmapi.com/security · Reports: team@ofmapi.com
OFMAPI is an independent organisation, not affiliated with OnlyFans.com or Fenix International Limited. "OnlyFans" is a registered trademark of Fenix International Limited.
