Developer Docs

REST API

Full programmatic access to creator search, scoring, outreach generation, and list management. Authenticate with an API key and call any endpoint from your agent or script.

Base URL:

Authentication

Every request must include an Authorization header. Two token types are accepted:

API KeyRecommended

Long-lived. Prefix cdp_. Generate from Settings → Developer. Best for agents and scripts.

JWT

Short-lived (7d). Returned from /api/auth/login. Best for frontend sessions.

curl /api/search \
  -H "Authorization: Bearer cdp_your_api_key_here" \
  -H "Content-Type: application/json" \
  -d '{"query": "fitness creators under 500k subs"}'

Rate limits

Every authenticated endpoint is subject to two independent limits: a plan-tier limit based on your subscription, and an absolute hard cap that applies to all plans equally to prevent runaway automation. Both limits are keyed to your user account (not your IP), so agents deployed in cloud environments won't collide with each other.

When a limit is hit the API returns 429 with a Retry-After header (seconds) and a JSON body indicating which limit was exceeded. Successful responses include RateLimit-Limit, RateLimit-Remaining, and RateLimit-Reset headers.

EndpointWindowFree TrialPay As You GoSubscriptionHard Cap (all plans)
POST /api/search60 s3 / min8 / min15 / min30 / min
GET /api/creators/:id60 s5 / min10 / min20 / min30 / min
GET /api/creators/:id/stats60 s8 / min15 / min30 / min40 / min
POST /api/outreach/generate60 s2 / min5 / min10 / min15 / min
POST /api/outreach/generate-bulk5 min1 / 5 min3 / 5 min10 / 5 min15 / 5 min
POST /api/outreach/reveal-email60 s5 / min10 / min20 / min30 / min
POST/PATCH/DELETE /api/lists60 s10 / min20 / min40 / min60 / min
POST /api/user/api-keys1 hr2 / hr5 / hr10 / hr10 / hr
All routes (IP firewall)60 s100 / min IP
HTTP/1.1 429 Too Many Requests
Retry-After: 42
Content-Type: application/json

{
  "error": "Rate limit for your plan reached.",
  "retryAfter": 42,
  "plan": "free_trial",
  "hint": "Upgrade your plan for higher limits."
}

Creators

Outreach

Lists

API Keys

API keys start with cdp_ and are shown once on creation — store them securely.

Errors

All errors return JSON with an error field and a standard HTTP status code.

400Bad RequestMissing or invalid parameters
401UnauthorizedMissing, invalid, or expired token
403ForbiddenAction requires a higher plan or more credits
404Not FoundResource does not exist
429Rate LimitedToo many requests — back off and retry
500Server ErrorSomething went wrong on our end
{ "error": "No search credits remaining", "upgradeRequired": true }
MCP Server docs →Manage API keys →