Skip to main content
Before you can act on an account, connect it once on the hosted API. onlyfanskit stores the session securely; you only keep the account id and your API key.
Connect flows run on onlyfanskit infrastructure. You do not host login pages, parse browser cookies, or manage session files yourself.

Connect paths

Embedded connect

Recommended for apps. Hosted popup or iframe — the creator signs in without you handling credentials.

Email + password

Recommended for automation. Start a login, poll until it resolves, handle SMS / authenticator / email challenges.

Mobile / QR

Creator approves on their own device — no password in your stack.

Which should I use?

Cookie paste and cURL import are not supported on the public platform. Use one of the paths above so sessions stay on onlyfanskit infrastructure.

One-shot vs poll

Success shape:
Challenges (SMS, TOTP, email device verification) are documented in Two-factor & challenges.
Connecting requires the accounts:write scope and counts against your org’s connect-attempt rate limit.