What counts as a credit?

One successful API call. If a request fails — expired session, upstream error — it isn't charged. Mass DMs are the exception: a mailing bills one credit per recipient, and you can preview the exact cost before sending.

How do I authenticate?

A Bearer token: Authorization: Bearer ofapis_sk_…. Create and revoke keys in the dashboard.

Can I manage multiple creators?

Yes. Link several accounts and address each by id under scoped routes. Account count scales with your plan.

Do you have an OpenAPI spec?

A complete OpenAPI 3.0 document and a live Swagger playground — point your generator at it for a typed client.

OnlyFans API in Postman

Running the OnlyFans API in Postman is the fastest way to explore the ofapis endpoints before you write a line of code. Because ofapis ships a full OpenAPI 3.0 spec, you don't build requests by hand — you import the spec and Postman generates a browsable collection of every route, with example bodies and parameters filled in.

Import the OpenAPI spec

In Postman, click Import (top-left).
Choose Link and paste the spec URL: https://api.ofapis.com/v3/api-docs/public.
Postman detects OpenAPI 3.0 and offers to generate a collection — accept it.

You now have a folder tree matching the API: messaging, mass DMs, scheduled posts, fan segments, subscribers, vault media and notifications, each request pre-populated from the spec. The base URL https://api.ofapis.com/api/public/v1 comes in as a variable automatically.

Set the Bearer token once

Don't paste the key into every request. Set it at the collection level so all requests inherit it:

Select the collection → Authorization tab.
Type = Bearer Token.
Token = {{ofapis_token}}.
Open the collection Variables tab, add ofapis_token, and put ofapis_sk_... in the Current value column (which isn't exported when you share the collection).

Every request under the collection now sends Authorization: Bearer ofapis_sk_... with no per-request setup. Use separate Postman environments (e.g. staging, prod) if you juggle more than one key.

Run and iterate

Open any generated request — say POST /accounts/{id}/chats/{chatId}/messages — fill the path variables and JSON body, and hit Send:

POST {{baseUrl}}/accounts/42/chats/8123/messages
Authorization: Bearer {{ofapis_token}}
Content-Type: application/json

{ "text": "Testing from Postman 👋" }

A 2xx confirms your session and key. Metered billing means a successful call costs one credit; a failed one (expired session, upstream error) is free, so exploring in Postman won't quietly drain your balance on errors.

Three things to do next

Collection Runner for smoke tests. Chain a GET subscribers → POST mass DM sequence and run it after each deploy to confirm the account session is live. See the mass DM API.
Generate client code. Use Postman's Code panel (</>) to export any request as curl, Python, Node or Go — a running start for your API integration.
Capture webhooks. Postman's Mock Server or a webhook.site URL is handy for inspecting an ofapis signed webhook payload before you build the real handler.

FAQ

Where is the OpenAPI spec for import?

At https://api.ofapis.com/v3/api-docs/public. Import it by link in Postman and it generates the full collection. The same spec powers the live docs at /docs.

How do I stop my token leaking when I share a collection?

Store it in the Current value column of a collection or environment variable, not the Initial value. Postman never exports Current values, so sharing the collection won't ship your ofapis_sk_... key.

Is this the official OnlyFans Postman collection?

No. ofapis is an independent, unofficial API not affiliated with OnlyFans. The collection is generated from ofapis's own OpenAPI spec, which describes the ofapis REST endpoints.

Do I need a paid plan to try it?

No. Sign up free and use the Free plan's 250 monthly credits to run real requests in Postman. See pricing for higher limits.

Related: curl · API documentation · all integrations