Invite a creator to your agency
Creates a join link that invites a real creator to be managed by the agency. The link is valid for 72 hours; with `email`, Dropfans also emails it.
/api/external/agency/invitesNewCreates a join link that invites a real creator to be managed by the agency. The link is valid for 72 hours; with email, Dropfans also emails it.
The creator accepts while signed in to their own Dropfans account and agrees to the agency's permissions there — an agency can never attach a creator without their consent. Once accepted, the creator shows up in GET /api/external/agency/creators.
Authentication
Send the creator's API key as a bearer token: Authorization: Bearer dpfn_…. See Authentication & API keys.
Needs the agency's own key, sent without X-Dropfans-Account.
Request body
Content type: application/json
| Name | Type | Required | Description |
|---|---|---|---|
email | string | Optional | Optional: Dropfans emails the link to this address. Format: email |
message | string | Optional | Optional personal note shown with the invite (longer text is cut at 500 characters). Max length: 500 |
{
"email": "[email protected]",
"message": "Hi Valeria — excited to work with you!"
}Responses
| Name | Type | Description |
|---|---|---|
inviteId | string | The invite’s id. |
inviteLink | string | Join link for the creator. They accept while signed in to their own Dropfans account. Format: uri |
expiresAt | string | When the link stops working (72 hours after creation). Format: date-time |
emailSent | boolean | True when Dropfans emailed the link to email. |
emailError | string | Present when email was given but sending failed — the invite still exists; share inviteLink yourself. |
{
"inviteId": "cmh5inv0001ab7k2p9q4r8s",
"inviteLink": "https://www.dropfans.io/agency/join/3f9c…",
"expiresAt": "2026-10-29T12:00:00.000Z",
"emailSent": true
}Errors
| Status | Body | When |
|---|---|---|
| 400 | {"error":"Agency endpoints act as the agency itself — send them without X-Dropfans-Account.","code":"account_header_not_allowed"} | The request carried `X-Dropfans-Account`. Agency endpoints always act as the agency. |
| 401 | {"error":"Unauthorized","code":"unauthorized"} | Missing or invalid API key. |
| 403 | {"error":"This endpoint needs a verified agency's own API key.","code":"agency_key_required"} | The key is not a verified agency’s own key — a creator’s key, or a key an agency minted for one of its creators. |
| 400 | {"error":"email is not a valid address","code":"invalid_email"} | Malformed `email`. |
| 400 | {"error":"Invalid JSON body"} | The body is not valid JSON. |
Rate limiting
Every response carries the X-RateLimit-Tier header and, on limited tiers, the per-minute and per-day trios — read X-RateLimit-Remaining and X-RateLimit-Reset instead of hardcoding limits. Details in Rate limits.
Code samples
curl -X POST "https://www.dropfans.io/api/external/agency/invites" \
-H "Authorization: Bearer $DROPFANS_API_KEY" \
-H "Content-Type: application/json" \
-d '{
"email": "[email protected]",
"message": "Hi Valeria — excited to work with you!"
}'const res = await fetch(`https://www.dropfans.io/api/external/agency/invites`, {
method: 'POST',
headers: {
Authorization: `Bearer ${process.env.DROPFANS_API_KEY}`,
'Content-Type': 'application/json',
},
body: JSON.stringify({
"email": "[email protected]",
"message": "Hi Valeria — excited to work with you!"
}),
});
console.log(await res.json());import os
import requests
res = requests.post(
"https://www.dropfans.io/api/external/agency/invites",
headers={"Authorization": f"Bearer {os.environ['DROPFANS_API_KEY']}"},
json={
"email": "[email protected]",
"message": "Hi Valeria — excited to work with you!",
},
)
print(res.json())Notes
When the email fails to send, the call still returns 201 with emailSent: false and an emailError — share inviteLink yourself.
Questions? [email protected]