Signing Requests

What does it mean to sign a request

If you want to use the OnlyFans API directly, you'll need to use the dynamic rules to sign your requests. Otherwise, your requests will be rejected. The dynamic rules are a set of values that are used in combination with some information about the request you're making to create a signature. This is to ensure that the request is valid.

Signed requests have two components:

• sign (string): A signature for the request.
• time (string): A timestamp for the request.

These are sent in the headers of the request to the OnlyFans API.

The sign value is created by combining the time, user-id, endpoint (requested url), and various other values (called "dynamic rules") that get updated periodically. If you're curious how often these values get updated, check out the Dynamic Rules Update Tracker.