> ## Documentation Index
> Fetch the complete documentation index at: https://www.dropfans.io/developers/llms.txt
> Use this file to discover all available pages before exploring further.

# PATCH /api/external/profile — Update the creator’s public profile

> Partial update of the creator's public profile — send only the fields that change; `null` clears a field. Returns the whole profile.

- Source: https://www.dropfans.io/developers/reference/update-profile
- Section: API reference
- OpenAPI: https://www.dropfans.io/developers/openapi.json

Partial update of the creator's public profile — send only the fields that change; `null` clears a field. Returns the whole profile.

Same rules as the dashboard: every text field runs the prohibited-word filter, usernames must be free (the old one is kept in the account's history), and unknown fields are **refused, not ignored**. `avatarUrl` / `bannerUrl` take a public https image URL: Dropfans downloads, stores and moderates it, so a new image shows once approved (watch `avatarModerationStatus`). This changes what fans see on Dropfans — only call it when the creator asked for it.

## Authentication

`Authorization: Bearer dpfn_...` — an API key generated in the dashboard (Vault → API Connect). By default the key acts for the one account it belongs to. Missing or invalid keys return 401 `{"error":"Unauthorized","code":"unauthorized"}`.

Optional `X-Dropfans-Account: <account id>` — with a verified agency's own key, act for a creator or AI persona the agency manages (ids from GET /api/external/agency/creators); the agency needs `canEditProfile` on that account. The response echoes the account acted on in the same header.

## Request body (application/json)

| Field | Type | Required | Description |
|---|---|---|---|
| `username` | string |  | New @handle: 3–30 of lowercase letters, digits, `_` and `-`. |
| `displayName` | string |  | Display name. Cannot be empty or null. |
| `bio` | string \\| null |  | Profile bio. |
| `profileVisible` | boolean |  | Show or hide the public profile. |
| `location` | string \\| null |  | Free-text location. |
| `websiteUrl` | string \\| null |  | Website link. |
| `twitterHandle` | string \\| null |  | X / Twitter handle. |
| `instagramHandle` | string \\| null |  | Instagram handle. |
| `tiktokHandle` | string \\| null |  | TikTok handle. |
| `snapchatHandle` | string \\| null |  | Snapchat handle. |
| `threadsHandle` | string \\| null |  | Threads handle. |
| `youtubeHandle` | string \\| null |  | YouTube handle. |
| `telegramHandle` | string \\| null |  | Telegram handle. |
| `whatsappNumber` | string \\| null |  | WhatsApp number. |
| `imessageHandle` | string \\| null |  | iMessage handle. |
| `primaryContactPlatform` | string \\| null |  | Which contact platform the profile highlights. |
| `avatarUrl` | string \\| null |  | Public https URL of the new profile image (Dropfans fetches and moderates it). null removes the image. |
| `bannerUrl` | string \\| null |  | Public https URL of the new banner image. null removes it. |

Example — New bio and avatar:

```json
{
  "bio": "Your favourite AI muse ✨",
  "avatarUrl": "https://cdn.example.com/luna/avatar.jpg"
}
```

## Responses

### 200

The updated profile.

| Field | Type | Required | Description |
|---|---|---|---|
| `id` | string | yes | The account’s user id. |
| `username` | string \\| null |  | Public @handle, without the @. |
| `displayName` | string \\| null |  | Display name. |
| `bio` | string \\| null |  | Profile bio. |
| `profileVisible` | boolean | yes | Whether the public profile is visible. |
| `location` | string \\| null |  | Free-text location. |
| `websiteUrl` | string \\| null |  | Website link. |
| `twitterHandle` | string \\| null |  | X / Twitter handle. |
| `instagramHandle` | string \\| null |  | Instagram handle. |
| `tiktokHandle` | string \\| null |  | TikTok handle. |
| `snapchatHandle` | string \\| null |  | Snapchat handle. |
| `threadsHandle` | string \\| null |  | Threads handle. |
| `youtubeHandle` | string \\| null |  | YouTube handle. |
| `telegramHandle` | string \\| null |  | Telegram handle. |
| `whatsappNumber` | string \\| null |  | WhatsApp number. |
| `imessageHandle` | string \\| null |  | iMessage handle. |
| `primaryContactPlatform` | string \\| null |  | Which contact platform the profile highlights. |
| `avatarUrl` | string \\| null |  | Profile image. Signed URL, valid 24 hours — do not store it. |
| `bannerUrl` | string \\| null |  | Banner image. Signed URL, valid 24 hours — do not store it. |
| `avatarModerationStatus` | string \\| null |  | PENDING, APPROVED, REJECTED or FLAGGED for the profile image (a new image shows once approved); null when there is none. |
| `bannerModerationStatus` | string \\| null |  | PENDING, APPROVED, REJECTED or FLAGGED for the banner image; null when there is none. |

```json
{
  "id": "cmh4v2q8k0003xy9z7w6v5u4t",
  "username": "luna_ai",
  "displayName": "Luna",
  "bio": "Your favourite AI muse ✨",
  "profileVisible": true,
  "location": null,
  "websiteUrl": null,
  "twitterHandle": null,
  "instagramHandle": "luna.ai",
  "tiktokHandle": null,
  "snapchatHandle": null,
  "threadsHandle": null,
  "youtubeHandle": null,
  "telegramHandle": "luna_ai",
  "whatsappNumber": null,
  "imessageHandle": null,
  "primaryContactPlatform": "telegram",
  "avatarUrl": "https://cdn.dropfans.io/luna_ai/profile.jpg?token=…",
  "bannerUrl": null,
  "avatarModerationStatus": "APPROVED",
  "bannerModerationStatus": null
}
```

## Errors

| Status | Body | When |
|---|---|---|
| 400 | `{"error":"Unknown profile field(s): nickname","code":"unknown_field","field":"nickname"}` | A field that is not in the list above. |
| 400 | `{"error":"bio is at most 2000 characters.","code":"invalid_field","field":"bio"}` | Wrong type, too long, an empty displayName, or an image URL that is not https. |
| 400 | `{"error":"Field \"bio\" contains a prohibited word: \"…\"","code":"prohibited_word","field":"bio"}` | A text field tripped the word filter. |
| 400 | `{"error":"Username must be 3–30 characters: lowercase letters, digits, underscores, hyphens.","code":"invalid_username","field":"username"}` | Malformed or reserved username. |
| 400 | `{"error":"avatarUrl could not be fetched as an image.","code":"image_unreachable","field":"avatarUrl"}` | The image URL did not return an image. Earlier fields in the same call are already saved. |
| 400 | `{"error":"Body must be a JSON object"}` | The body is not a JSON object. |
| 401 | `{"error":"Unauthorized","code":"unauthorized"}` | Missing or invalid API key. |
| 403 | `{"error":"Profile editing is restricted for this account.","code":"profile_locked"}` | Profile editing is locked for this account. |
| 409 | `{"error":"Username is already taken.","code":"username_taken","field":"username"}` | Another account has that username. |
| 400 | `{"error":"X-Dropfans-Account must be an account id (from GET /api/external/agency/creators), not a username.","code":"invalid_account_header"}` | `X-Dropfans-Account` is not an account id. |
| 403 | `{"error":"This key cannot act for that account.","code":"account_not_managed"}` | `X-Dropfans-Account` names an account this key cannot act for: not an agency’s own key, no ACCEPTED management, or the agency or account is suspended, banned or deleted (an unknown id gets the same answer). |
| 403 | `{"error":"The agency does not have permission for this on that account.","code":"permission_denied","permission":"canEditProfile"}` | With `X-Dropfans-Account`: the agency lacks `canEditProfile` on that account. |

## Notes

Images are applied last: when `avatarUrl` or `bannerUrl` fails with `image_unreachable`, the other fields in the same request have already been saved.

## Rate limiting

Per-key fixed windows by tier (Personal 60/min · 5,000/day; approved apps 300/min · 50,000/day; Dropfans-operated integrations exempt). Read the live values from X-RateLimit-Tier, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset and their -Day variants; a 429 carries Retry-After and `{"error":"Rate limit exceeded","code":"rate_limited"}`. See [Rate limits](https://www.dropfans.io/developers/concepts/rate-limits.md).

## Code samples

### curl

```bash
curl -X PATCH "https://www.dropfans.io/api/external/profile" \
  -H "Authorization: Bearer $DROPFANS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "bio": "Your favourite AI muse ✨",
  "avatarUrl": "https://cdn.example.com/luna/avatar.jpg"
}'
```

### Node

```javascript
const res = await fetch(`https://www.dropfans.io/api/external/profile`, {
  method: 'PATCH',
  headers: {
    Authorization: `Bearer ${process.env.DROPFANS_API_KEY}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    "bio": "Your favourite AI muse ✨",
    "avatarUrl": "https://cdn.example.com/luna/avatar.jpg"
  }),
});
console.log(await res.json());
```

### Python

```python
import os
import requests

res = requests.patch(
    "https://www.dropfans.io/api/external/profile",
    headers={"Authorization": f"Bearer {os.environ['DROPFANS_API_KEY']}"},
    json={
        "bio": "Your favourite AI muse ✨",
        "avatarUrl": "https://cdn.example.com/luna/avatar.jpg",
    },
)
print(res.json())
```

## OpenAPI

```json
{
  "method": "PATCH",
  "path": "/api/external/profile",
  "operationId": "updateProfile",
  "tags": [
    "account"
  ],
  "summary": "Update the creator’s public profile",
  "description": "Partial update of the creator's public profile — send only the fields that change; `null` clears a field. Returns the whole profile.\n\nSame rules as the dashboard: every text field runs the prohibited-word filter, usernames must be free (the old one is kept in the account's history), and unknown fields are **refused, not ignored**. `avatarUrl` / `bannerUrl` take a public https image URL: Dropfans downloads, stores and moderates it, so a new image shows once approved (watch `avatarModerationStatus`). This changes what fans see on Dropfans — only call it when the creator asked for it.",
  "parameters": [
    {
      "name": "X-Dropfans-Account",
      "in": "header",
      "required": false,
      "description": "Agencies only. With a verified agency’s own key, the id of a creator or AI persona the agency manages (from GET /api/external/agency/creators): the request then acts as that account, exactly as if it were sent with that account’s own key. Account ids only — usernames are refused (400 invalid_account_header). Checked on every request: the management must be ACCEPTED, nobody may be suspended, banned or deleted (else 403 account_not_managed), and the agency needs the endpoint’s permission on that account (else 403 permission_denied). Omit it to act as the key’s own account.",
      "schema": {
        "type": "string",
        "pattern": "^c[a-z0-9]{20,32}$"
      },
      "example": "cmh4v2q8k0003xy9z7w6v5u4t"
    }
  ],
  "requestBody": {
    "required": true,
    "content": {
      "application/json": {
        "schema": {
          "type": "object",
          "properties": {
            "username": {
              "type": "string",
              "description": "New @handle: 3–30 of lowercase letters, digits, `_` and `-`.",
              "example": "luna_ai",
              "pattern": "^[a-z0-9_-]{3,30}$"
            },
            "displayName": {
              "type": "string",
              "description": "Display name. Cannot be empty or null.",
              "example": "Luna",
              "maxLength": 80
            },
            "bio": {
              "type": [
                "string",
                "null"
              ],
              "description": "Profile bio.",
              "maxLength": 2000
            },
            "profileVisible": {
              "type": "boolean",
              "description": "Show or hide the public profile."
            },
            "location": {
              "type": [
                "string",
                "null"
              ],
              "description": "Free-text location.",
              "maxLength": 120
            },
            "websiteUrl": {
              "type": [
                "string",
                "null"
              ],
              "description": "Website link.",
              "maxLength": 300
            },
            "twitterHandle": {
              "type": [
                "string",
                "null"
              ],
              "description": "X / Twitter handle.",
              "maxLength": 100
            },
            "instagramHandle": {
              "type": [
                "string",
                "null"
              ],
              "description": "Instagram handle.",
              "maxLength": 100
            },
            "tiktokHandle": {
              "type": [
                "string",
                "null"
              ],
              "description": "TikTok handle.",
              "maxLength": 100
            },
            "snapchatHandle": {
              "type": [
                "string",
                "null"
              ],
              "description": "Snapchat handle.",
              "maxLength": 100
            },
            "threadsHandle": {
              "type": [
                "string",
                "null"
              ],
              "description": "Threads handle.",
              "maxLength": 100
            },
            "youtubeHandle": {
              "type": [
                "string",
                "null"
              ],
              "description": "YouTube handle.",
              "maxLength": 100
            },
            "telegramHandle": {
              "type": [
                "string",
                "null"
              ],
              "description": "Telegram handle.",
              "maxLength": 100
            },
            "whatsappNumber": {
              "type": [
                "string",
                "null"
              ],
              "description": "WhatsApp number.",
              "maxLength": 40
            },
            "imessageHandle": {
              "type": [
                "string",
                "null"
              ],
              "description": "iMessage handle.",
              "maxLength": 100
            },
            "primaryContactPlatform": {
              "type": [
                "string",
                "null"
              ],
              "description": "Which contact platform the profile highlights.",
              "maxLength": 40
            },
            "avatarUrl": {
              "type": [
                "string",
                "null"
              ],
              "description": "Public https URL of the new profile image (Dropfans fetches and moderates it). null removes the image.",
              "format": "uri"
            },
            "bannerUrl": {
              "type": [
                "string",
                "null"
              ],
              "description": "Public https URL of the new banner image. null removes it.",
              "format": "uri"
            }
          }
        },
        "examples": {
          "bio": {
            "summary": "New bio and avatar",
            "value": {
              "bio": "Your favourite AI muse ✨",
              "avatarUrl": "https://cdn.example.com/luna/avatar.jpg"
            }
          }
        }
      }
    }
  },
  "responses": {
    "200": {
      "description": "The updated profile.",
      "headers": {
        "X-RateLimit-Tier": {
          "description": "Rate-limit tier of the key: personal, app or first_party (first_party is unlimited).",
          "schema": {
            "type": "string",
            "enum": [
              "personal",
              "app",
              "first_party"
            ]
          }
        },
        "X-RateLimit-Limit": {
          "description": "Requests allowed per minute for this key (absent on first_party).",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Remaining": {
          "description": "Requests left in the current minute window.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Reset": {
          "description": "Epoch seconds when the minute window resets.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Limit-Day": {
          "description": "Requests allowed per UTC day for this key (absent on first_party).",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Remaining-Day": {
          "description": "Requests left in the current UTC day window.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Reset-Day": {
          "description": "Epoch seconds when the day window resets.",
          "schema": {
            "type": "integer"
          }
        },
        "X-Dropfans-Account": {
          "description": "The id of the account this request acted on — the key’s own account, or the managed account named in the X-Dropfans-Account request header. Assert it when acting for several accounts.",
          "schema": {
            "type": "string"
          }
        }
      },
      "content": {
        "application/json": {
          "schema": {
            "type": "object",
            "properties": {
              "id": {
                "type": "string",
                "description": "The account’s user id.",
                "example": "cmh4v2q8k0003xy9z7w6v5u4t"
              },
              "username": {
                "type": [
                  "string",
                  "null"
                ],
                "description": "Public @handle, without the @.",
                "example": "luna_ai"
              },
              "displayName": {
                "type": [
                  "string",
                  "null"
                ],
                "description": "Display name.",
                "example": "Luna"
              },
              "bio": {
                "type": [
                  "string",
                  "null"
                ],
                "description": "Profile bio."
              },
              "profileVisible": {
                "type": "boolean",
                "description": "Whether the public profile is visible."
              },
              "location": {
                "type": [
                  "string",
                  "null"
                ],
                "description": "Free-text location."
              },
              "websiteUrl": {
                "type": [
                  "string",
                  "null"
                ],
                "description": "Website link."
              },
              "twitterHandle": {
                "type": [
                  "string",
                  "null"
                ],
                "description": "X / Twitter handle."
              },
              "instagramHandle": {
                "type": [
                  "string",
                  "null"
                ],
                "description": "Instagram handle."
              },
              "tiktokHandle": {
                "type": [
                  "string",
                  "null"
                ],
                "description": "TikTok handle."
              },
              "snapchatHandle": {
                "type": [
                  "string",
                  "null"
                ],
                "description": "Snapchat handle."
              },
              "threadsHandle": {
                "type": [
                  "string",
                  "null"
                ],
                "description": "Threads handle."
              },
              "youtubeHandle": {
                "type": [
                  "string",
                  "null"
                ],
                "description": "YouTube handle."
              },
              "telegramHandle": {
                "type": [
                  "string",
                  "null"
                ],
                "description": "Telegram handle."
              },
              "whatsappNumber": {
                "type": [
                  "string",
                  "null"
                ],
                "description": "WhatsApp number."
              },
              "imessageHandle": {
                "type": [
                  "string",
                  "null"
                ],
                "description": "iMessage handle."
              },
              "primaryContactPlatform": {
                "type": [
                  "string",
                  "null"
                ],
                "description": "Which contact platform the profile highlights."
              },
              "avatarUrl": {
                "type": [
                  "string",
                  "null"
                ],
                "description": "Profile image. Signed URL, valid 24 hours — do not store it.",
                "format": "uri"
              },
              "bannerUrl": {
                "type": [
                  "string",
                  "null"
                ],
                "description": "Banner image. Signed URL, valid 24 hours — do not store it.",
                "format": "uri"
              },
              "avatarModerationStatus": {
                "type": [
                  "string",
                  "null"
                ],
                "description": "PENDING, APPROVED, REJECTED or FLAGGED for the profile image (a new image shows once approved); null when there is none."
              },
              "bannerModerationStatus": {
                "type": [
                  "string",
                  "null"
                ],
                "description": "PENDING, APPROVED, REJECTED or FLAGGED for the banner image; null when there is none."
              }
            },
            "required": [
              "id",
              "profileVisible"
            ]
          },
          "example": {
            "id": "cmh4v2q8k0003xy9z7w6v5u4t",
            "username": "luna_ai",
            "displayName": "Luna",
            "bio": "Your favourite AI muse ✨",
            "profileVisible": true,
            "location": null,
            "websiteUrl": null,
            "twitterHandle": null,
            "instagramHandle": "luna.ai",
            "tiktokHandle": null,
            "snapchatHandle": null,
            "threadsHandle": null,
            "youtubeHandle": null,
            "telegramHandle": "luna_ai",
            "whatsappNumber": null,
            "imessageHandle": null,
            "primaryContactPlatform": "telegram",
            "avatarUrl": "https://cdn.dropfans.io/luna_ai/profile.jpg?token=…",
            "bannerUrl": null,
            "avatarModerationStatus": "APPROVED",
            "bannerModerationStatus": null
          }
        }
      }
    },
    "400": {
      "description": "A field that is not in the list above. Also: Wrong type, too long, an empty displayName, or an image URL that is not https. Also: A text field tripped the word filter. Also: Malformed or reserved username. Also: The image URL did not return an image. Earlier fields in the same call are already saved. Also: The body is not a JSON object. Also: `X-Dropfans-Account` is not an account id.",
      "headers": {
        "X-RateLimit-Tier": {
          "description": "Rate-limit tier of the key: personal, app or first_party (first_party is unlimited).",
          "schema": {
            "type": "string",
            "enum": [
              "personal",
              "app",
              "first_party"
            ]
          }
        },
        "X-RateLimit-Limit": {
          "description": "Requests allowed per minute for this key (absent on first_party).",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Remaining": {
          "description": "Requests left in the current minute window.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Reset": {
          "description": "Epoch seconds when the minute window resets.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Limit-Day": {
          "description": "Requests allowed per UTC day for this key (absent on first_party).",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Remaining-Day": {
          "description": "Requests left in the current UTC day window.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Reset-Day": {
          "description": "Epoch seconds when the day window resets.",
          "schema": {
            "type": "integer"
          }
        }
      },
      "content": {
        "application/json": {
          "schema": {
            "type": "object",
            "properties": {
              "error": {
                "type": "string",
                "description": "Human-readable message naming the offending field and word.",
                "example": "Field \"name\" contains a prohibited word: \"…\""
              },
              "field": {
                "type": "string",
                "description": "Which request field tripped the filter (\"name\" or \"description\")."
              },
              "matchedWord": {
                "type": "string",
                "description": "The prohibited word."
              }
            },
            "required": [
              "error",
              "field",
              "matchedWord"
            ]
          },
          "example": {
            "error": "Unknown profile field(s): nickname",
            "code": "unknown_field",
            "field": "nickname"
          }
        }
      }
    },
    "401": {
      "description": "Missing or invalid API key.",
      "headers": {
        "X-RateLimit-Tier": {
          "description": "Rate-limit tier of the key: personal, app or first_party (first_party is unlimited).",
          "schema": {
            "type": "string",
            "enum": [
              "personal",
              "app",
              "first_party"
            ]
          }
        },
        "X-RateLimit-Limit": {
          "description": "Requests allowed per minute for this key (absent on first_party).",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Remaining": {
          "description": "Requests left in the current minute window.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Reset": {
          "description": "Epoch seconds when the minute window resets.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Limit-Day": {
          "description": "Requests allowed per UTC day for this key (absent on first_party).",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Remaining-Day": {
          "description": "Requests left in the current UTC day window.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Reset-Day": {
          "description": "Epoch seconds when the day window resets.",
          "schema": {
            "type": "integer"
          }
        }
      },
      "content": {
        "application/json": {
          "schema": {
            "type": "object",
            "properties": {
              "error": {
                "type": "string",
                "description": "Human-readable message.",
                "example": "Rate limit exceeded"
              },
              "code": {
                "type": "string",
                "description": "Machine-readable code: unauthorized, app_suspended, first_party_only, rate_limited, username_required, invalid_account_header, account_not_managed, permission_denied, account_header_not_allowed, agency_key_required — plus endpoint-specific codes listed on each reference page.",
                "example": "rate_limited"
              }
            },
            "required": [
              "error",
              "code"
            ]
          },
          "example": {
            "error": "Unauthorized",
            "code": "unauthorized"
          }
        }
      }
    },
    "403": {
      "description": "Profile editing is locked for this account. Also: `X-Dropfans-Account` names an account this key cannot act for: not an agency’s own key, no ACCEPTED management, or the agency or account is suspended, banned or deleted (an unknown id gets the same answer). Also: With `X-Dropfans-Account`: the agency lacks `canEditProfile` on that account.",
      "headers": {
        "X-RateLimit-Tier": {
          "description": "Rate-limit tier of the key: personal, app or first_party (first_party is unlimited).",
          "schema": {
            "type": "string",
            "enum": [
              "personal",
              "app",
              "first_party"
            ]
          }
        },
        "X-RateLimit-Limit": {
          "description": "Requests allowed per minute for this key (absent on first_party).",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Remaining": {
          "description": "Requests left in the current minute window.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Reset": {
          "description": "Epoch seconds when the minute window resets.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Limit-Day": {
          "description": "Requests allowed per UTC day for this key (absent on first_party).",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Remaining-Day": {
          "description": "Requests left in the current UTC day window.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Reset-Day": {
          "description": "Epoch seconds when the day window resets.",
          "schema": {
            "type": "integer"
          }
        }
      },
      "content": {
        "application/json": {
          "schema": {
            "type": "object",
            "properties": {
              "error": {
                "type": "string",
                "description": "Human-readable message.",
                "example": "Rate limit exceeded"
              },
              "code": {
                "type": "string",
                "description": "Machine-readable code: unauthorized, app_suspended, first_party_only, rate_limited, username_required, invalid_account_header, account_not_managed, permission_denied, account_header_not_allowed, agency_key_required — plus endpoint-specific codes listed on each reference page.",
                "example": "rate_limited"
              }
            },
            "required": [
              "error",
              "code"
            ]
          },
          "example": {
            "error": "Profile editing is restricted for this account.",
            "code": "profile_locked"
          }
        }
      }
    },
    "409": {
      "description": "Another account has that username.",
      "headers": {
        "X-RateLimit-Tier": {
          "description": "Rate-limit tier of the key: personal, app or first_party (first_party is unlimited).",
          "schema": {
            "type": "string",
            "enum": [
              "personal",
              "app",
              "first_party"
            ]
          }
        },
        "X-RateLimit-Limit": {
          "description": "Requests allowed per minute for this key (absent on first_party).",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Remaining": {
          "description": "Requests left in the current minute window.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Reset": {
          "description": "Epoch seconds when the minute window resets.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Limit-Day": {
          "description": "Requests allowed per UTC day for this key (absent on first_party).",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Remaining-Day": {
          "description": "Requests left in the current UTC day window.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Reset-Day": {
          "description": "Epoch seconds when the day window resets.",
          "schema": {
            "type": "integer"
          }
        }
      },
      "content": {
        "application/json": {
          "schema": {
            "type": "object",
            "properties": {
              "error": {
                "type": "string",
                "description": "Human-readable message naming the offending field and word.",
                "example": "Field \"name\" contains a prohibited word: \"…\""
              },
              "field": {
                "type": "string",
                "description": "Which request field tripped the filter (\"name\" or \"description\")."
              },
              "matchedWord": {
                "type": "string",
                "description": "The prohibited word."
              }
            },
            "required": [
              "error",
              "field",
              "matchedWord"
            ]
          },
          "example": {
            "error": "Username is already taken.",
            "code": "username_taken",
            "field": "username"
          }
        }
      }
    },
    "429": {
      "description": "Rate limit exceeded for the current minute or day window. Wait Retry-After seconds and retry.",
      "headers": {
        "X-RateLimit-Tier": {
          "description": "Rate-limit tier of the key: personal, app or first_party (first_party is unlimited).",
          "schema": {
            "type": "string",
            "enum": [
              "personal",
              "app",
              "first_party"
            ]
          }
        },
        "X-RateLimit-Limit": {
          "description": "Requests allowed per minute for this key (absent on first_party).",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Remaining": {
          "description": "Requests left in the current minute window.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Reset": {
          "description": "Epoch seconds when the minute window resets.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Limit-Day": {
          "description": "Requests allowed per UTC day for this key (absent on first_party).",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Remaining-Day": {
          "description": "Requests left in the current UTC day window.",
          "schema": {
            "type": "integer"
          }
        },
        "X-RateLimit-Reset-Day": {
          "description": "Epoch seconds when the day window resets.",
          "schema": {
            "type": "integer"
          }
        },
        "Retry-After": {
          "description": "Seconds to wait before retrying (sent with 429s).",
          "schema": {
            "type": "integer"
          }
        }
      },
      "content": {
        "application/json": {
          "schema": {
            "type": "object",
            "properties": {
              "error": {
                "type": "string",
                "description": "Human-readable message.",
                "example": "Rate limit exceeded"
              },
              "code": {
                "type": "string",
                "description": "Machine-readable code: unauthorized, app_suspended, first_party_only, rate_limited, username_required, invalid_account_header, account_not_managed, permission_denied, account_header_not_allowed, agency_key_required — plus endpoint-specific codes listed on each reference page.",
                "example": "rate_limited"
              }
            },
            "required": [
              "error",
              "code"
            ]
          },
          "example": {
            "error": "Rate limit exceeded",
            "code": "rate_limited"
          }
        }
      }
    }
  },
  "x-codeSamples": [
    {
      "lang": "cURL",
      "label": "curl",
      "source": "curl -X PATCH \"https://www.dropfans.io/api/external/profile\" \\\n  -H \"Authorization: Bearer $DROPFANS_API_KEY\" \\\n  -H \"Content-Type: application/json\" \\\n  -d '{\n  \"bio\": \"Your favourite AI muse ✨\",\n  \"avatarUrl\": \"https://cdn.example.com/luna/avatar.jpg\"\n}'"
    },
    {
      "lang": "JavaScript",
      "label": "Node",
      "source": "const res = await fetch(`https://www.dropfans.io/api/external/profile`, {\n  method: 'PATCH',\n  headers: {\n    Authorization: `Bearer ${process.env.DROPFANS_API_KEY}`,\n    'Content-Type': 'application/json',\n  },\n  body: JSON.stringify({\n    \"bio\": \"Your favourite AI muse ✨\",\n    \"avatarUrl\": \"https://cdn.example.com/luna/avatar.jpg\"\n  }),\n});\nconsole.log(await res.json());"
    },
    {
      "lang": "Python",
      "source": "import os\nimport requests\n\nres = requests.patch(\n    \"https://www.dropfans.io/api/external/profile\",\n    headers={\"Authorization\": f\"Bearer {os.environ['DROPFANS_API_KEY']}\"},\n    json={\n        \"bio\": \"Your favourite AI muse ✨\",\n        \"avatarUrl\": \"https://cdn.example.com/luna/avatar.jpg\",\n    },\n)\nprint(res.json())"
    }
  ],
  "x-dropfans-docs": "https://www.dropfans.io/developers/reference/update-profile",
  "x-dropfans-agency-permission": "canEditProfile"
}
```

---

Previous: [Read the creator’s public profile](https://www.dropfans.io/developers/reference/get-profile.md) · Next: [Read the creator’s timezone](https://www.dropfans.io/developers/reference/get-timezone.md) · All pages: [llms.txt](https://www.dropfans.io/developers/llms.txt)
