> ## Documentation Index
> Fetch the complete documentation index at: https://www.dropfans.io/developers/llms.txt
> Use this file to discover all available pages before exploring further.

# POST /api/external/accounts — Create a creator account (sign-up from your page)

> Creates a creator (or agency) account from your own sign-up page and returns the ID-check link to redirect the creator to.

- Source: https://www.dropfans.io/developers/reference/create-account
- Section: API reference
- OpenAPI: https://www.dropfans.io/developers/openapi.json

Creates a creator (or agency) account from your own sign-up page and returns the ID-check link to redirect the creator to.

The account is created with everything our own onboarding sets — handle, display name, bio, residency, avatar, banner and subscription price — and starts as `pending_kyc`. Send the creator to `kycUrl` (a full-page redirect or a new tab, never an iframe). When they finish, they come back to your `kycReturnUrl` with `?kyc=approved|declined|in_review`. That parameter is only a hint for your UI: the decision arrives as the [account.kyc_updated webhook](https://www.dropfans.io/developers/webhooks/overview.md), and selling is unlocked only once the account is `active`.

The response also holds an `apiKey` for the new account, bound to your app. Use it straight away to upload media and create drops for the creator. Store it like a password; it is shown once.

**Referral commission.** Accounts you create are attributed to your app owner’s account, which earns the standard referral commission on their sales.

**Terms.** Show the creator our Terms of Service, Privacy Policy and 2257 statement and record their acceptance. Send `legalAccepted: true` with the IP address and user agent of **the creator’s browser** at the moment they accepted (not your server’s). We generate the signed acceptance record from them.

> [!NOTE] Owner-held key + enablement
> Call this with a key your app owner holds: their own, or one their agency minted for its personas or managed creators. Creator sign-up has to be enabled for your app; ask us to enable it.

## Authentication

`Authorization: Bearer dpfn_...` — an API key generated in the creator's dashboard (Vault → API Connect). One key = one creator. Missing or invalid keys return 401 `{"error":"Unauthorized","code":"unauthorized"}`.

## Request body (application/json)

| Field | Type | Required | Description |
|---|---|---|---|
| `email` | string | yes | The creator’s email. It becomes their sign-in. 409 if it is already registered. |
| `password` | string |  | Optional. Leave it out and we email the creator a link to set one (valid 7 days). Either way they get a welcome email. |
| `username` | string | yes | Public @handle (letters, digits, underscores). 409 when taken. |
| `displayName` | string |  | Display name on the profile. |
| `bio` | string |  | Profile bio. |
| `location` | string |  | Optional profile location line. |
| `accountType` | `creator` \\| `agency` |  | `agency` is for AI-creator operators that run several personas. |
| `residencyCountry` | string | yes | Country of residence, ISO 3166-1 alpha-2. Used for payouts and tax. |
| `avatarUrl` | string |  | https URL of the profile picture (JPEG, PNG or WebP, ≤4 MB). Fetched once, stripped of metadata and moderated like a normal upload. A bad image never fails the sign-up; check `images.avatar`. |
| `bannerUrl` | string |  | https URL of the profile banner. Same rules as avatarUrl. |
| `subscription` | object |  | Optional subscription offer for the profile. |
| `subscription.priceUsd` | number | yes | Price in USD dollars, $5–$750. |
| `subscription.interval` | `monthly` \\| `weekly` |  | Billing period. |
| `subscription.trialDays` | integer |  | Free trial length. |
| `legalAccepted` | boolean | yes | Must be `true`: the creator accepted the Terms of Service, Privacy Policy and 2257 statement on your page. |
| `acceptedFromIp` | string | yes | The creator’s browser IP at acceptance. |
| `acceptedUserAgent` | string | yes | The creator’s browser user agent at acceptance. |
| `kycReturnUrl` | string |  | https URL the creator returns to after the ID check. We append `?kyc=<status>`. |

Example — A creator with profile and subscription:

```json
{
  "email": "valeria@example.com",
  "username": "valeria",
  "displayName": "Valeria",
  "bio": "New sets every Friday.",
  "residencyCountry": "SE",
  "avatarUrl": "https://cdn.example.com/valeria/avatar.jpg",
  "bannerUrl": "https://cdn.example.com/valeria/banner.jpg",
  "subscription": {
    "priceUsd": 9.99,
    "interval": "monthly",
    "trialDays": 0
  },
  "legalAccepted": true,
  "acceptedFromIp": "203.0.113.7",
  "acceptedUserAgent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_0 like Mac OS X) …",
  "kycReturnUrl": "https://crm.example.com/onboarding/done"
}
```

## Responses

### 201

Created. Redirect the creator to `kycUrl`; keep `accountId` and `apiKey`.

| Field | Type | Required | Description |
|---|---|---|---|
| `accountId` | string | yes | The new account’s id. |
| `username` | string | yes | Public @handle (without @). |
| `displayName` | string \\| null |  | Display name. |
| `email` | string \\| null |  | Sign-in email. |
| `accountType` | `creator` \\| `agency` | yes | What the account was created as. |
| `status` | `pending_kyc` \\| `active` | yes | `pending_kyc` until the ID check is approved, then `active` (can sell and get paid). |
| `sellerStatus` | string | yes | Internal seller state, for support (PENDING_KYC, KYC_IN_REVIEW, KYC_REJECTED, VERIFIED_CREATOR, VERIFIED_AGENCY). |
| `kycStatus` | `not_started` \\| `session_created` \\| `in_review` \\| `processing` \\| `approved` \\| `rejected` | yes | ID-check state. `session_created` = link opened, not finished; `processing` = approved, compliance documents still being generated. |
| `profileUrl` | string | yes | Public profile URL. |
| `createdAt` | string | yes | When the account was created. |
| `apiKey` | string | yes | A key for the new account, bound to your app. Shown once. |
| `kycUrl` | string \\| null |  | The ID-check link. Null if it could not be opened right now; then call create-kyc-session. |
| `kycExpiresAt` | string \\| null |  | The link is reused until then; ask for a new one after. |
| `referralCredited` | boolean | yes | True when the account was attributed to your app owner for referral commission. |
| `images` | object | yes | What happened to avatarUrl / bannerUrl: "saved", "failed" or null (not sent). |
| `images.avatar` | `saved` \\| `failed` \\| null |  | Avatar result. |
| `images.banner` | `saved` \\| `failed` \\| null |  | Banner result. |

```json
{
  "accountId": "clxac0001acct",
  "username": "valeria",
  "displayName": "Valeria",
  "email": "valeria@example.com",
  "accountType": "creator",
  "status": "pending_kyc",
  "sellerStatus": "PENDING_KYC",
  "kycStatus": "session_created",
  "profileUrl": "https://www.dropfans.io/u/valeria",
  "createdAt": "2026-10-17T16:00:00.000Z",
  "apiKey": "dpfn_3f9c…",
  "kycUrl": "https://verify.didit.me/session/…",
  "kycExpiresAt": "2026-10-18T16:00:00.000Z",
  "referralCredited": true,
  "images": {
    "avatar": "saved",
    "banner": "saved"
  }
}
```

## Errors

| Status | Body | When |
|---|---|---|
| 400 | `{"error":"residencyCountry must be an ISO 3166-1 alpha-2 code (e.g. \"SE\").","code":"invalid_input","field":"residencyCountry"}` | A field failed validation. `field` names it. |
| 409 | `{"error":"There is already a DropFans account with this email. Sign in instead.","code":"email_taken"}` | The email is registered. |
| 409 | `{"error":"That profile link is taken. Pick another.","code":"username_taken"}` | The handle is taken. |
| 401 | `{"error":"Unauthorized","code":"unauthorized"}` | Missing or invalid API key. |
| 403 | `{"error":"This endpoint needs a key bound to an approved app.","code":"app_key_required"}` | A Personal key was used. |
| 403 | `{"error":"Use the app owner's key for this endpoint.","code":"owner_key_required"}` | The key was minted by a creator for themselves. App-level calls need a key held by your app owner: their own, or one their agency minted for its personas or managed creators. |
| 403 | `{"error":"This app is not enabled for this endpoint. Contact support.","code":"capability_missing"}` | Creator sign-up has not been enabled for your app yet. |
| 429 | `{"error":"At most 20 sign-ups per hour.","code":"rate_limited"}` | Too many sign-ups from your app this hour. `Retry-After` says when to retry. |

## Rate limiting

Per-key fixed windows by tier (Personal 60/min · 5,000/day; approved apps 300/min · 50,000/day; Dropfans-operated integrations exempt). Read the live values from X-RateLimit-Tier, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset and their -Day variants; a 429 carries Retry-After and `{"error":"Rate limit exceeded","code":"rate_limited"}`. See [Rate limits](https://www.dropfans.io/developers/concepts/rate-limits.md).

## Code samples

### curl

```bash
curl -X POST "https://www.dropfans.io/api/external/accounts" \
  -H "Authorization: Bearer $DROPFANS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "email": "valeria@example.com",
  "username": "valeria",
  "displayName": "Valeria",
  "bio": "New sets every Friday.",
  "residencyCountry": "SE",
  "avatarUrl": "https://cdn.example.com/valeria/avatar.jpg",
  "bannerUrl": "https://cdn.example.com/valeria/banner.jpg",
  "subscription": {
    "priceUsd": 9.99,
    "interval": "monthly",
    "trialDays": 0
  },
  "legalAccepted": true,
  "acceptedFromIp": "203.0.113.7",
  "acceptedUserAgent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_0 like Mac OS X) …",
  "kycReturnUrl": "https://crm.example.com/onboarding/done"
}'
```

### Node

```javascript
const res = await fetch(`https://www.dropfans.io/api/external/accounts`, {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${process.env.DROPFANS_API_KEY}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    "email": "valeria@example.com",
    "username": "valeria",
    "displayName": "Valeria",
    "bio": "New sets every Friday.",
    "residencyCountry": "SE",
    "avatarUrl": "https://cdn.example.com/valeria/avatar.jpg",
    "bannerUrl": "https://cdn.example.com/valeria/banner.jpg",
    "subscription": {
      "priceUsd": 9.99,
      "interval": "monthly",
      "trialDays": 0
    },
    "legalAccepted": true,
    "acceptedFromIp": "203.0.113.7",
    "acceptedUserAgent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_0 like Mac OS X) …",
    "kycReturnUrl": "https://crm.example.com/onboarding/done"
  }),
});
console.log(await res.json());
```

### Python

```python
import os
import requests

res = requests.post(
    "https://www.dropfans.io/api/external/accounts",
    headers={"Authorization": f"Bearer {os.environ['DROPFANS_API_KEY']}"},
    json={
        "email": "valeria@example.com",
        "username": "valeria",
        "displayName": "Valeria",
        "bio": "New sets every Friday.",
        "residencyCountry": "SE",
        "avatarUrl": "https://cdn.example.com/valeria/avatar.jpg",
        "bannerUrl": "https://cdn.example.com/valeria/banner.jpg",
        "subscription": {
            "priceUsd": 9.99,
            "interval": "monthly",
            "trialDays": 0,
        },
        "legalAccepted": True,
        "acceptedFromIp": "203.0.113.7",
        "acceptedUserAgent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_0 like Mac OS X) …",
        "kycReturnUrl": "https://crm.example.com/onboarding/done",
    },
)
print(res.json())
```

## OpenAPI

```json
{
  "method": "POST",
  "path": "/api/external/accounts",
  "operationId": "createAccount",
  "tags": [
    "crm"
  ],
  "summary": "Create a creator account (sign-up from your page)",
  "description": "Creates a creator (or agency) account from your own sign-up page and returns the ID-check link to redirect the creator to.\n\nThe account is created with everything our own onboarding sets — handle, display name, bio, residency, avatar, banner and subscription price — and starts as `pending_kyc`. Send the creator to `kycUrl` (a full-page redirect or a new tab, never an iframe). When they finish, they come back to your `kycReturnUrl` with `?kyc=approved|declined|in_review`. That parameter is only a hint for your UI: the decision arrives as the [account.kyc_updated webhook](https://www.dropfans.io/developers/webhooks/overview.md), and selling is unlocked only once the account is `active`.\n\nThe response also holds an `apiKey` for the new account, bound to your app. Use it straight away to upload media and create drops for the creator. Store it like a password; it is shown once.\n\n**Referral commission.** Accounts you create are attributed to your app owner’s account, which earns the standard referral commission on their sales.\n\n**Terms.** Show the creator our Terms of Service, Privacy Policy and 2257 statement and record their acceptance. Send `legalAccepted: true` with the IP address and user agent of **the creator’s browser** at the moment they accepted (not your server’s). We generate the signed acceptance record from them.\n\n> [!NOTE] Owner-held key + enablement\n> Call this with a key your app owner holds: their own, or one their agency minted for its personas or managed creators. Creator sign-up has to be enabled for your app; ask us to enable it.",
  "requestBody": {
    "required": true,
    "content": {
      "application/json": {
        "schema": {
          "type": "object",
          "properties": {
            "email": {
              "type": "string",
              "description": "The creator’s email. It becomes their sign-in. 409 if it is already registered.",
              "format": "email",
              "example": "valeria@example.com"
            },
            "password": {
              "type": "string",
              "description": "Optional. Leave it out and we email the creator a link to set one (valid 7 days). Either way they get a welcome email.",
              "minLength": 8,
              "maxLength": 200
            },
            "username": {
              "type": "string",
              "description": "Public @handle (letters, digits, underscores). 409 when taken.",
              "example": "valeria"
            },
            "displayName": {
              "type": "string",
              "description": "Display name on the profile.",
              "example": "Valeria",
              "maxLength": 50
            },
            "bio": {
              "type": "string",
              "description": "Profile bio.",
              "maxLength": 500
            },
            "location": {
              "type": "string",
              "description": "Optional profile location line.",
              "maxLength": 100
            },
            "accountType": {
              "type": "string",
              "description": "`agency` is for AI-creator operators that run several personas.",
              "enum": [
                "creator",
                "agency"
              ],
              "default": "creator"
            },
            "residencyCountry": {
              "type": "string",
              "description": "Country of residence, ISO 3166-1 alpha-2. Used for payouts and tax.",
              "example": "SE",
              "pattern": "^[A-Z]{2}$"
            },
            "avatarUrl": {
              "type": "string",
              "description": "https URL of the profile picture (JPEG, PNG or WebP, ≤4 MB). Fetched once, stripped of metadata and moderated like a normal upload. A bad image never fails the sign-up; check `images.avatar`.",
              "format": "uri"
            },
            "bannerUrl": {
              "type": "string",
              "description": "https URL of the profile banner. Same rules as avatarUrl.",
              "format": "uri"
            },
            "subscription": {
              "type": "object",
              "properties": {
                "priceUsd": {
                  "type": "number",
                  "description": "Price in USD dollars, $5–$750.",
                  "example": 9.99,
                  "minimum": 5,
                  "maximum": 750
                },
                "interval": {
                  "type": "string",
                  "description": "Billing period.",
                  "enum": [
                    "monthly",
                    "weekly"
                  ],
                  "default": "monthly"
                },
                "trialDays": {
                  "type": "integer",
                  "description": "Free trial length.",
                  "default": 0,
                  "minimum": 0,
                  "maximum": 30
                }
              },
              "required": [
                "priceUsd"
              ],
              "description": "Optional subscription offer for the profile."
            },
            "legalAccepted": {
              "type": "boolean",
              "description": "Must be `true`: the creator accepted the Terms of Service, Privacy Policy and 2257 statement on your page."
            },
            "acceptedFromIp": {
              "type": "string",
              "description": "The creator’s browser IP at acceptance.",
              "example": "203.0.113.7"
            },
            "acceptedUserAgent": {
              "type": "string",
              "description": "The creator’s browser user agent at acceptance.",
              "maxLength": 500
            },
            "kycReturnUrl": {
              "type": "string",
              "description": "https URL the creator returns to after the ID check. We append `?kyc=<status>`.",
              "format": "uri",
              "example": "https://crm.example.com/onboarding/done"
            }
          },
          "required": [
            "email",
            "username",
            "residencyCountry",
            "legalAccepted",
            "acceptedFromIp",
            "acceptedUserAgent"
          ]
        },
        "examples": {
          "creator": {
            "summary": "A creator with profile and subscription",
            "value": {
              "email": "valeria@example.com",
              "username": "valeria",
              "displayName": "Valeria",
              "bio": "New sets every Friday.",
              "residencyCountry": "SE",
              "avatarUrl": "https://cdn.example.com/valeria/avatar.jpg",
              "bannerUrl": "https://cdn.example.com/valeria/banner.jpg",
              "subscription": {
                "priceUsd": 9.99,
                "interval": "monthly",
                "trialDays": 0
              },
              "legalAccepted": true,
              "acceptedFromIp": "203.0.113.7",
              "acceptedUserAgent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_0 like Mac OS X) …",
              "kycReturnUrl": "https://crm.example.com/onboarding/done"
            }
          }
        }
      }
    }
  },
  "responses": {
    "201": {
      "description": "Created. Redirect the creator to `kycUrl`; keep `accountId` and `apiKey`.",
      "headers": {
        "X-RateLimit-Tier": {
          "description": "Rate-limit tier of the key: personal, app or first_party (first_party is unlimited).",
          "schema": {
            "type": "string",
            "enum": [
              "personal",
              "app",
              "first_party"
            ]
          }
        },
        "X-RateLimit-Limit": {
          "description": "Requests allowed per minute for this key (absent on first_party).",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Remaining": {
          "description": "Requests left in the current minute window.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Reset": {
          "description": "Epoch seconds when the minute window resets.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Limit-Day": {
          "description": "Requests allowed per UTC day for this key (absent on first_party).",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Remaining-Day": {
          "description": "Requests left in the current UTC day window.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Reset-Day": {
          "description": "Epoch seconds when the day window resets.",
          "schema": {
            "type": "integer"
          }
        }
      },
      "content": {
        "application/json": {
          "schema": {
            "type": "object",
            "properties": {
              "accountId": {
                "type": "string",
                "description": "The new account’s id.",
                "example": "clxac0001acct"
              },
              "username": {
                "type": "string",
                "description": "Public @handle (without @).",
                "example": "valeria"
              },
              "displayName": {
                "type": [
                  "string",
                  "null"
                ],
                "description": "Display name.",
                "example": "Valeria"
              },
              "email": {
                "type": [
                  "string",
                  "null"
                ],
                "description": "Sign-in email.",
                "format": "email"
              },
              "accountType": {
                "type": "string",
                "description": "What the account was created as.",
                "enum": [
                  "creator",
                  "agency"
                ]
              },
              "status": {
                "type": "string",
                "description": "`pending_kyc` until the ID check is approved, then `active` (can sell and get paid).",
                "enum": [
                  "pending_kyc",
                  "active"
                ]
              },
              "sellerStatus": {
                "type": "string",
                "description": "Internal seller state, for support (PENDING_KYC, KYC_IN_REVIEW, KYC_REJECTED, VERIFIED_CREATOR, VERIFIED_AGENCY)."
              },
              "kycStatus": {
                "type": "string",
                "description": "ID-check state. `session_created` = link opened, not finished; `processing` = approved, compliance documents still being generated.",
                "enum": [
                  "not_started",
                  "session_created",
                  "in_review",
                  "processing",
                  "approved",
                  "rejected"
                ]
              },
              "profileUrl": {
                "type": "string",
                "description": "Public profile URL.",
                "format": "uri"
              },
              "createdAt": {
                "type": "string",
                "description": "When the account was created.",
                "format": "date-time"
              },
              "apiKey": {
                "type": "string",
                "description": "A key for the new account, bound to your app. Shown once."
              },
              "kycUrl": {
                "type": [
                  "string",
                  "null"
                ],
                "description": "The ID-check link. Null if it could not be opened right now; then call create-kyc-session.",
                "format": "uri"
              },
              "kycExpiresAt": {
                "type": [
                  "string",
                  "null"
                ],
                "description": "The link is reused until then; ask for a new one after.",
                "format": "date-time"
              },
              "referralCredited": {
                "type": "boolean",
                "description": "True when the account was attributed to your app owner for referral commission."
              },
              "images": {
                "type": "object",
                "properties": {
                  "avatar": {
                    "type": [
                      "string",
                      "null"
                    ],
                    "description": "Avatar result.",
                    "enum": [
                      "saved",
                      "failed"
                    ]
                  },
                  "banner": {
                    "type": [
                      "string",
                      "null"
                    ],
                    "description": "Banner result.",
                    "enum": [
                      "saved",
                      "failed"
                    ]
                  }
                },
                "description": "What happened to avatarUrl / bannerUrl: \"saved\", \"failed\" or null (not sent)."
              }
            },
            "required": [
              "accountId",
              "username",
              "accountType",
              "status",
              "sellerStatus",
              "kycStatus",
              "profileUrl",
              "createdAt",
              "apiKey",
              "referralCredited",
              "images"
            ]
          },
          "example": {
            "accountId": "clxac0001acct",
            "username": "valeria",
            "displayName": "Valeria",
            "email": "valeria@example.com",
            "accountType": "creator",
            "status": "pending_kyc",
            "sellerStatus": "PENDING_KYC",
            "kycStatus": "session_created",
            "profileUrl": "https://www.dropfans.io/u/valeria",
            "createdAt": "2026-10-17T16:00:00.000Z",
            "apiKey": "dpfn_3f9c…",
            "kycUrl": "https://verify.didit.me/session/…",
            "kycExpiresAt": "2026-10-18T16:00:00.000Z",
            "referralCredited": true,
            "images": {
              "avatar": "saved",
              "banner": "saved"
            }
          }
        }
      }
    },
    "400": {
      "description": "A field failed validation. `field` names it.",
      "headers": {
        "X-RateLimit-Tier": {
          "description": "Rate-limit tier of the key: personal, app or first_party (first_party is unlimited).",
          "schema": {
            "type": "string",
            "enum": [
              "personal",
              "app",
              "first_party"
            ]
          }
        },
        "X-RateLimit-Limit": {
          "description": "Requests allowed per minute for this key (absent on first_party).",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Remaining": {
          "description": "Requests left in the current minute window.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Reset": {
          "description": "Epoch seconds when the minute window resets.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Limit-Day": {
          "description": "Requests allowed per UTC day for this key (absent on first_party).",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Remaining-Day": {
          "description": "Requests left in the current UTC day window.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Reset-Day": {
          "description": "Epoch seconds when the day window resets.",
          "schema": {
            "type": "integer"
          }
        }
      },
      "content": {
        "application/json": {
          "schema": {
            "type": "object",
            "properties": {
              "error": {
                "type": "string",
                "description": "Human-readable message naming the offending field and word.",
                "example": "Field \"name\" contains a prohibited word: \"…\""
              },
              "field": {
                "type": "string",
                "description": "Which request field tripped the filter (\"name\" or \"description\")."
              },
              "matchedWord": {
                "type": "string",
                "description": "The prohibited word."
              }
            },
            "required": [
              "error",
              "field",
              "matchedWord"
            ]
          },
          "example": {
            "error": "residencyCountry must be an ISO 3166-1 alpha-2 code (e.g. \"SE\").",
            "code": "invalid_input",
            "field": "residencyCountry"
          }
        }
      }
    },
    "401": {
      "description": "Missing or invalid API key.",
      "headers": {
        "X-RateLimit-Tier": {
          "description": "Rate-limit tier of the key: personal, app or first_party (first_party is unlimited).",
          "schema": {
            "type": "string",
            "enum": [
              "personal",
              "app",
              "first_party"
            ]
          }
        },
        "X-RateLimit-Limit": {
          "description": "Requests allowed per minute for this key (absent on first_party).",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Remaining": {
          "description": "Requests left in the current minute window.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Reset": {
          "description": "Epoch seconds when the minute window resets.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Limit-Day": {
          "description": "Requests allowed per UTC day for this key (absent on first_party).",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Remaining-Day": {
          "description": "Requests left in the current UTC day window.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Reset-Day": {
          "description": "Epoch seconds when the day window resets.",
          "schema": {
            "type": "integer"
          }
        }
      },
      "content": {
        "application/json": {
          "schema": {
            "type": "object",
            "properties": {
              "error": {
                "type": "string",
                "description": "Human-readable message.",
                "example": "Rate limit exceeded"
              },
              "code": {
                "type": "string",
                "description": "Machine-readable code: unauthorized, app_suspended, first_party_only, rate_limited, username_required.",
                "example": "rate_limited"
              }
            },
            "required": [
              "error",
              "code"
            ]
          },
          "example": {
            "error": "Unauthorized",
            "code": "unauthorized"
          }
        }
      }
    },
    "403": {
      "description": "A Personal key was used. Also: The key was minted by a creator for themselves. App-level calls need a key held by your app owner: their own, or one their agency minted for its personas or managed creators. Also: Creator sign-up has not been enabled for your app yet.",
      "headers": {
        "X-RateLimit-Tier": {
          "description": "Rate-limit tier of the key: personal, app or first_party (first_party is unlimited).",
          "schema": {
            "type": "string",
            "enum": [
              "personal",
              "app",
              "first_party"
            ]
          }
        },
        "X-RateLimit-Limit": {
          "description": "Requests allowed per minute for this key (absent on first_party).",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Remaining": {
          "description": "Requests left in the current minute window.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Reset": {
          "description": "Epoch seconds when the minute window resets.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Limit-Day": {
          "description": "Requests allowed per UTC day for this key (absent on first_party).",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Remaining-Day": {
          "description": "Requests left in the current UTC day window.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Reset-Day": {
          "description": "Epoch seconds when the day window resets.",
          "schema": {
            "type": "integer"
          }
        }
      },
      "content": {
        "application/json": {
          "schema": {
            "type": "object",
            "properties": {
              "error": {
                "type": "string",
                "description": "Human-readable message.",
                "example": "Rate limit exceeded"
              },
              "code": {
                "type": "string",
                "description": "Machine-readable code: unauthorized, app_suspended, first_party_only, rate_limited, username_required.",
                "example": "rate_limited"
              }
            },
            "required": [
              "error",
              "code"
            ]
          },
          "example": {
            "error": "This endpoint needs a key bound to an approved app.",
            "code": "app_key_required"
          }
        }
      }
    },
    "409": {
      "description": "The email is registered. Also: The handle is taken.",
      "headers": {
        "X-RateLimit-Tier": {
          "description": "Rate-limit tier of the key: personal, app or first_party (first_party is unlimited).",
          "schema": {
            "type": "string",
            "enum": [
              "personal",
              "app",
              "first_party"
            ]
          }
        },
        "X-RateLimit-Limit": {
          "description": "Requests allowed per minute for this key (absent on first_party).",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Remaining": {
          "description": "Requests left in the current minute window.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Reset": {
          "description": "Epoch seconds when the minute window resets.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Limit-Day": {
          "description": "Requests allowed per UTC day for this key (absent on first_party).",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Remaining-Day": {
          "description": "Requests left in the current UTC day window.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Reset-Day": {
          "description": "Epoch seconds when the day window resets.",
          "schema": {
            "type": "integer"
          }
        }
      },
      "content": {
        "application/json": {
          "schema": {
            "type": "object",
            "properties": {
              "error": {
                "type": "string",
                "description": "Human-readable message.",
                "example": "Rate limit exceeded"
              },
              "code": {
                "type": "string",
                "description": "Machine-readable code: unauthorized, app_suspended, first_party_only, rate_limited, username_required.",
                "example": "rate_limited"
              }
            },
            "required": [
              "error",
              "code"
            ]
          },
          "example": {
            "error": "There is already a DropFans account with this email. Sign in instead.",
            "code": "email_taken"
          }
        }
      }
    },
    "429": {
      "description": "Too many sign-ups from your app this hour. `Retry-After` says when to retry.",
      "headers": {
        "X-RateLimit-Tier": {
          "description": "Rate-limit tier of the key: personal, app or first_party (first_party is unlimited).",
          "schema": {
            "type": "string",
            "enum": [
              "personal",
              "app",
              "first_party"
            ]
          }
        },
        "X-RateLimit-Limit": {
          "description": "Requests allowed per minute for this key (absent on first_party).",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Remaining": {
          "description": "Requests left in the current minute window.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Reset": {
          "description": "Epoch seconds when the minute window resets.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Limit-Day": {
          "description": "Requests allowed per UTC day for this key (absent on first_party).",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Remaining-Day": {
          "description": "Requests left in the current UTC day window.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Reset-Day": {
          "description": "Epoch seconds when the day window resets.",
          "schema": {
            "type": "integer"
          }
        },
        "Retry-After": {
          "description": "Seconds to wait before retrying (sent with 429s).",
          "schema": {
            "type": "integer"
          }
        }
      },
      "content": {
        "application/json": {
          "schema": {
            "type": "object",
            "properties": {
              "error": {
                "type": "string",
                "description": "Human-readable message.",
                "example": "Rate limit exceeded"
              },
              "code": {
                "type": "string",
                "description": "Machine-readable code: unauthorized, app_suspended, first_party_only, rate_limited, username_required.",
                "example": "rate_limited"
              }
            },
            "required": [
              "error",
              "code"
            ]
          },
          "example": {
            "error": "At most 20 sign-ups per hour.",
            "code": "rate_limited"
          }
        }
      }
    }
  },
  "x-codeSamples": [
    {
      "lang": "cURL",
      "label": "curl",
      "source": "curl -X POST \"https://www.dropfans.io/api/external/accounts\" \\\n  -H \"Authorization: Bearer $DROPFANS_API_KEY\" \\\n  -H \"Content-Type: application/json\" \\\n  -d '{\n  \"email\": \"valeria@example.com\",\n  \"username\": \"valeria\",\n  \"displayName\": \"Valeria\",\n  \"bio\": \"New sets every Friday.\",\n  \"residencyCountry\": \"SE\",\n  \"avatarUrl\": \"https://cdn.example.com/valeria/avatar.jpg\",\n  \"bannerUrl\": \"https://cdn.example.com/valeria/banner.jpg\",\n  \"subscription\": {\n    \"priceUsd\": 9.99,\n    \"interval\": \"monthly\",\n    \"trialDays\": 0\n  },\n  \"legalAccepted\": true,\n  \"acceptedFromIp\": \"203.0.113.7\",\n  \"acceptedUserAgent\": \"Mozilla/5.0 (iPhone; CPU iPhone OS 18_0 like Mac OS X) …\",\n  \"kycReturnUrl\": \"https://crm.example.com/onboarding/done\"\n}'"
    },
    {
      "lang": "JavaScript",
      "label": "Node",
      "source": "const res = await fetch(`https://www.dropfans.io/api/external/accounts`, {\n  method: 'POST',\n  headers: {\n    Authorization: `Bearer ${process.env.DROPFANS_API_KEY}`,\n    'Content-Type': 'application/json',\n  },\n  body: JSON.stringify({\n    \"email\": \"valeria@example.com\",\n    \"username\": \"valeria\",\n    \"displayName\": \"Valeria\",\n    \"bio\": \"New sets every Friday.\",\n    \"residencyCountry\": \"SE\",\n    \"avatarUrl\": \"https://cdn.example.com/valeria/avatar.jpg\",\n    \"bannerUrl\": \"https://cdn.example.com/valeria/banner.jpg\",\n    \"subscription\": {\n      \"priceUsd\": 9.99,\n      \"interval\": \"monthly\",\n      \"trialDays\": 0\n    },\n    \"legalAccepted\": true,\n    \"acceptedFromIp\": \"203.0.113.7\",\n    \"acceptedUserAgent\": \"Mozilla/5.0 (iPhone; CPU iPhone OS 18_0 like Mac OS X) …\",\n    \"kycReturnUrl\": \"https://crm.example.com/onboarding/done\"\n  }),\n});\nconsole.log(await res.json());"
    },
    {
      "lang": "Python",
      "source": "import os\nimport requests\n\nres = requests.post(\n    \"https://www.dropfans.io/api/external/accounts\",\n    headers={\"Authorization\": f\"Bearer {os.environ['DROPFANS_API_KEY']}\"},\n    json={\n        \"email\": \"valeria@example.com\",\n        \"username\": \"valeria\",\n        \"displayName\": \"Valeria\",\n        \"bio\": \"New sets every Friday.\",\n        \"residencyCountry\": \"SE\",\n        \"avatarUrl\": \"https://cdn.example.com/valeria/avatar.jpg\",\n        \"bannerUrl\": \"https://cdn.example.com/valeria/banner.jpg\",\n        \"subscription\": {\n            \"priceUsd\": 9.99,\n            \"interval\": \"monthly\",\n            \"trialDays\": 0,\n        },\n        \"legalAccepted\": True,\n        \"acceptedFromIp\": \"203.0.113.7\",\n        \"acceptedUserAgent\": \"Mozilla/5.0 (iPhone; CPU iPhone OS 18_0 like Mac OS X) …\",\n        \"kycReturnUrl\": \"https://crm.example.com/onboarding/done\",\n    },\n)\nprint(res.json())"
    }
  ],
  "x-dropfans-docs": "https://www.dropfans.io/developers/reference/create-account"
}
```

---

Previous: [Register the creator’s personal notification chat](https://www.dropfans.io/developers/reference/register-telegram-chat.md) · Next: [List accounts you created](https://www.dropfans.io/developers/reference/list-accounts.md) · All pages: [llms.txt](https://www.dropfans.io/developers/llms.txt)
