OFAuth
Dynamic RulesEverything is great until you see this error.
Ship fast. We keep requests signed.
Production access available by request
Get Started Now →How OFAuth Solves Dynamic Rules
Detect
Continuously monitors for rule drifts, and updates them within seconds.
Validate
New signatures are verified against real endpoints before publishing.
Notify
Webhooks deliver fresh rules as soon as they happen.
Update SDKs
Link and Access consume the latest rules automatically—no deploy required.
Do you need dynamic rules?
Most teams don't. Here's how to decide.
You DON'T need it if
- You use OFAuth Access (signing handled)
- You use the OFAuth SDK
You DO need it if
- You call OnlyFans directly
- You run a custom proxy
FAQ
Dynamic Rules, explained
The dynamic rules are cryptographic signing parameters required for OnlyFans API
authentication. They include signature formats, checksum constants, app tokens, and
other values that OnlyFans uses to verify request authenticity.
OnlyFans implements sophisticated anti-abuse measures requiring every API request to include a valid cryptographic signature generated using current parameters.
OnlyFans implements sophisticated anti-abuse measures requiring every API request to include a valid cryptographic signature generated using current parameters.
Use our Dynamic Rules API to fetch current signing parameters, or the
Set up webhooks for proactive notifications when rules change, or implement error-driven updates by monitoring for 400 "Please refresh the page" errors.
Check out the documentation for implementation details.
/sign endpoint for automatic signature generation. Set up webhooks for proactive notifications when rules change, or implement error-driven updates by monitoring for 400 "Please refresh the page" errors.
Check out the documentation for implementation details.
The dynamic rules change at random intervals - sometimes multiple times per day,
sometimes once every few days. OnlyFans doesn't publish a schedule.
Changes happen without warning and can occur during peak usage times. This is why automated monitoring and instant updates are essential for production applications.
Changes happen without warning and can occur during peak usage times. This is why automated monitoring and instant updates are essential for production applications.
Yes! If you're just experimenting or building a proof of concept, a public, delayed rules mirror is available on GitHub at no cost.
For production use, real-time Dynamic Rules API access is available by request. Please contact us to discuss your requirements and get access to production-grade, real-time rule updates.
Dynamic Rules Update Tracker
= no update = 1 update,
= 2 updates (each ring is +1 update)
Last 30 days
0 updates in the last 30 days
Current Status
API rules revision:
Public rules status:
Pending update in ~1-3 hours
Ready to handle OnlyFans API signing?
Get access to real-time dynamic rules and never worry about authentication errors again.
Production access available by request
Get Started Now →