List the creator’s drops
Every drop on the account, newest first, with price, who can buy it, moderation status and checkout URL — including drops made in the dashboard.
/api/external/dropsNewEvery drop on the account, newest first, with price, who can buy it, moderation status and checkout URL — including drops made in the dashboard.
Page with cursor: pass the nextCursor of the previous page until it is null. For per-media status and sales of one drop, use GET /api/external/drops/{id}.
Authentication
Send the creator's API key as a bearer token: Authorization: Bearer dpfn_…. See Authentication & API keys.
An agency's own key can call this for a creator it manages by adding X-Dropfans-Account: <account id> (needs canManageDrops). See Agencies.
Query parameters
| Name | Type | Required | Description |
|---|---|---|---|
limit | integer | Optional | Page size (out-of-range values are clamped). Default: 50Min: 1 Max: 100 |
cursor | string | Optional | nextCursor from the previous page. |
Responses
| Name | Type | Description | |||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
drops | DropSummary[] | Newest first.Show child attributes
| |||||||||||||||||||||||||||||||||
nextCursor | string | null | Pass as cursor for the next page; null on the last page. |
{
"drops": [
{
"id": "clxdr0p000001prod",
"name": "Beach set — 6 photos",
"description": null,
"price": 25,
"currency": "USD",
"accessMode": "OPEN",
"allowDownload": false,
"status": "APPROVED",
"mediaCount": 3,
"buyUrl": "https://www.dropfans.io/buy/clxdr0p000001prod",
"createdAt": "2026-08-15T09:00:00.000Z"
}
],
"nextCursor": null
}Errors
| Status | Body | When |
|---|---|---|
| 401 | {"error":"Unauthorized","code":"unauthorized"} | Missing or invalid API key. |
| 400 | {"error":"X-Dropfans-Account must be an account id (from GET /api/external/agency/creators), not a username.","code":"invalid_account_header"} | `X-Dropfans-Account` is not an account id. |
| 403 | {"error":"This key cannot act for that account.","code":"account_not_managed"} | `X-Dropfans-Account` names an account this key cannot act for: not an agency’s own key, no ACCEPTED management, or the agency or account is suspended, banned or deleted (an unknown id gets the same answer). |
| 403 | {"error":"The agency does not have permission for this on that account.","code":"permission_denied","permission":"canManageDrops"} | With `X-Dropfans-Account`: the agency lacks `canManageDrops` on that account. |
Rate limiting
Every response carries the X-RateLimit-Tier header and, on limited tiers, the per-minute and per-day trios — read X-RateLimit-Remaining and X-RateLimit-Reset instead of hardcoding limits. Details in Rate limits.
Code samples
curl "https://www.dropfans.io/api/external/drops" \
-H "Authorization: Bearer $DROPFANS_API_KEY"const res = await fetch(`https://www.dropfans.io/api/external/drops`, {
headers: {
Authorization: `Bearer ${process.env.DROPFANS_API_KEY}`,
},
});
console.log(await res.json());import os
import requests
res = requests.get(
"https://www.dropfans.io/api/external/drops",
headers={"Authorization": f"Bearer {os.environ['DROPFANS_API_KEY']}"},
)
print(res.json())Questions? [email protected]