Public evidence · verified 24 September 2026

Check the source. Reproduce the numbers.

This page records a dated, reproducible snapshot of public evidence for The Only API. It links to the exact source commit and CI runs, publishes the source archive digest, and gives commands for checking the API count yourself.

It is first-party evidence, not an independent security audit or a promise about future availability.

Public source snapshot

6489703

The downloadable ZIP is tied to this public Git commit rather than an unversioned latest build.

Inspect the commit

Source ZIP SHA-256

d39f55ff8caea2e069f079eb6b92c75cb3f9c169e68c179f237cf5250273078a

A SHA-256 digest lets you detect a changed or incomplete download. It does not prove the source is safe.

Download the verified ZIP

No-phone-home guard

GitHub Actions run 35951794494 — passed

The published workflow completed successfully for commit 6489703. Read the workflow before deciding what that guard covers.

Open the CI run

Tests and builds

GitHub Actions run 35951794499 — passed

The Python, DCO and build jobs shown by GitHub completed successfully for the same commit.

Open the CI run

Machine-readable API surface

OpenAPI 3.1 · 467 paths · 549 operations

Counted from the public OpenAPI document on 24 September 2026. The live specification can grow after this dated check.

Open the specification

Run the checks yourself

1. Pin the public source

git clone https://github.com/xcelerate-management/onlyfans-api-open-source.git
cd onlyfans-api-open-source
git checkout 6489703
git rev-parse --short HEAD

2. Verify the downloaded ZIP

# macOS or Linux
sha256sum onlyfans-api-open-source-6489703.zip

# Windows PowerShell
Get-FileHash .\onlyfans-api-open-source-6489703.zip -Algorithm SHA256

# expected
d39f55ff8caea2e069f079eb6b92c75cb3f9c169e68c179f237cf5250273078a

3. Count OpenAPI paths and operations

node -e "fetch('https://theonlyapi.com/api/openapi.json').then(r=>r.json()).then(s=>{const methods=new Set(['get','put','post','delete','options','head','patch','trace']);const paths=Object.keys(s.paths||{});const operations=Object.values(s.paths||{}).reduce((n,p)=>n+Object.keys(p).filter(k=>methods.has(k)).length,0);console.log({openapi:s.openapi,paths:paths.length,operations})})"

The dated result above was OpenAPI 3.1 with 467 paths and 549 operations. A later result can differ because the public API specification is a living document.

What this evidence does not prove

  • No independent party has supplied packet-capture evidence for this page. Review the code and run your own network observation if that boundary matters to you.
  • A passing CI run proves only that the published checks passed at that commit. It is not a penetration test, formal verification or guarantee that the software has no vulnerabilities.
  • We do not publish verified latency percentiles, a measured uptime history, or evidence supporting a zero-account-ban claim here.
  • OnlyFans and Fansly are third-party platforms whose behaviour can change without notice. Successful tests at one commit do not guarantee future compatibility or account outcomes.
  • GitHub currently presents the linked repository as an archived, read-only public snapshot. Commit 6489703 remains inspectable and reproducible; check the project page for its current maintenance status before planning a deployment.