Delete a drop nobody has bought
API reference

Delete a drop nobody has bought

Deletes a drop that has no orders — not even an unfinished checkout. Once anyone has an order on it, buyers' access depends on it and the call returns `409 has_orders`.

View as MarkdownUpdated Oct 26, 2026
DELETE/api/external/drops/{id}New

Deletes a drop that has no orders — not even an unfinished checkout. Once anyone has an order on it, buyers' access depends on it and the call returns 409 has_orders.

The vault media stays in the vault either way.

Authentication

Send the creator's API key as a bearer token: Authorization: Bearer dpfn_…. See Authentication & API keys.

An agency's own key can call this for a creator it manages by adding X-Dropfans-Account: <account id> (needs canManageDrops). See Agencies.

Path parameters

NameTypeRequiredDescription
idstringRequiredThe product (drop) id.

Responses

200Deleted.
NameTypeDescription
idstringThe deleted drop’s id.
deletedbooleanAlways true.
Example response
{
  "id": "clxdr0p000001prod",
  "deleted": true
}

Errors

StatusBodyWhen
401{"error":"Unauthorized","code":"unauthorized"}Missing or invalid API key.
404{"error":"Drop not found"}No such drop on this account.
409{"error":"This drop has orders, so buyers keep access to it and it cannot be deleted.","code":"has_orders"}The drop has at least one order (paid or started).
400{"error":"X-Dropfans-Account must be an account id (from GET /api/external/agency/creators), not a username.","code":"invalid_account_header"}`X-Dropfans-Account` is not an account id.
403{"error":"This key cannot act for that account.","code":"account_not_managed"}`X-Dropfans-Account` names an account this key cannot act for: not an agency’s own key, no ACCEPTED management, or the agency or account is suspended, banned or deleted (an unknown id gets the same answer).
403{"error":"The agency does not have permission for this on that account.","code":"permission_denied","permission":"canManageDrops"}With `X-Dropfans-Account`: the agency lacks `canManageDrops` on that account.

Rate limiting

Every response carries the X-RateLimit-Tier header and, on limited tiers, the per-minute and per-day trios — read X-RateLimit-Remaining and X-RateLimit-Reset instead of hardcoding limits. Details in Rate limits.

Code samples

curl -X DELETE "https://www.dropfans.io/api/external/drops/$PRODUCT_ID" \
  -H "Authorization: Bearer $DROPFANS_API_KEY"

Questions? [email protected]