Authenticate with Session

Connect an OnlyFans account using an authenticated browser session. No password is required.

Before you start

Open an incognito browser and sign in to OnlyFans.
Open DevTools and find any authenticated OnlyFans request.
Copy the request as cURL using Copy as cURL.
Send the cURL to the /api/authenticate/session endpoint.
Once the request is successful, do not sign out of OnlyFans. You can simply close the incognito browser.

Video tutorial: Watch the tutorial

The API extracts the required session information from the cURL request and uses it to authenticate the account.

https://v1.onlyfansapi.io

POST

/api/authenticate/session

Request

curl --request POST \
  --url 'https://v1.onlyfansapi.io/api/authenticate/session' \
  --header 'x-api-key: YOUR_API_KEY' \
  --header 'Content-Type: application/json' \
  --data '{
    "curl": "curl \"https://onlyfans.com/api2/v2/users/me\" -H \"user-agent: …\" -b \"sess=…; auth_id=…\"",
    "name": "My OnlyFans Account",
    "countryCode": "US"
  }'

Headers

x-api-key*

string

Your API key. See Authentication.

Body Parameters

curl*

string

The cURL command copied from your browser DevTools for any authenticated onlyfans.com request.

name*

string

A label for the account, shown in your dashboard.

countryCode*

string

ISO 3166-1 alpha-2 country code that sets the proxy location, in capitals — for example US or GB.

Response Fields

Field	Type	Description
`acct_id`	`string`	Identifier for the connected account, prefixed `acct_`. Use it wherever an endpoint takes an `acct_id`.
`name`	`string`	The label you sent as `name`.
`of_user_id`	`string`	The account's numeric OnlyFans user ID.
`of_username`	`string`	The account's OnlyFans username.
`email`	`string`	The email address the session belongs to.
`country_code`	`string`	The proxy country the account is routed through.
`verified`	`boolean`	Whether the session was checked against OnlyFans and works.

Errors

Status	Message	Cause
`401`	`API key is missing`	No `x-api-key` header was sent.
`401`	`Invalid or inactive API key`	The key does not exist, or has been revoked.

Response

{
    "acct_id": "acct_id_string",
    "name": "My OnlyFans Account",
    "of_user_id": "of_user_id_string",
    "of_username": "of_username_string",
    "email": "account_email_string",
    "country_code": "US",
    "verified": true
}