> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://legal.fanvue.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://legal.fanvue.com/_mcp/server.

## API Access & Usage Policy Update

We've updated the [**API Access & Usage Policy**](/api-policy) to protect creators from social engineering attacks targeting Third-Party Application credentials.

### What's Changed?

#### [Definitions](/api-policy#definitions)

* Added definitions for **Third-Party Application** and **Application Credentials** to clarify OAuth-related terminology.

#### [Section 5 - Prohibited Use](/api-policy#5-prohibited-use)

* Explicitly prohibited creating applications at the request of third parties.
* Prohibited sharing Application Credentials (client secrets, redirect URIs, webhook callbacks) with others.
* Prohibited instructing others to create applications or share credentials in violation of the Policy.

#### [Section 10 - Security Requirements](/api-policy#10-security-requirements)

* Added comprehensive guidance on Third-Party Application security.
* Detailed steps to revoke access and delete compromised applications.
* Specific warnings about social engineering tactics, including chatbots asking creators to create apps on their behalf.

#### [Section 11 - Termination, Suspension & Versioning](/api-policy#11-termination-suspension--versioning)

* Clarified that Fanvue may take immediate action against accounts involved in credential sharing or facilitating unauthorised access.

### Why These Changes?

These updates respond to observed social engineering attempts where malicious services have asked creators to create Third-Party Applications and share credentials, enabling unauthorised access to creator accounts and data.

### Need to Check Your Account?

If you have previously created a Third-Party Application at someone else's request, or shared credentials with a third-party service:

1. **Revoke third-party access:** Settings → Account → Third Party Apps Consent → Revoke
2. **Delete any compromised applications:** Creator Tools → Build → \[Select App] → Delete
3. **Contact support** if you believe your account may have been compromised: [support@fanvue.com](mailto:support@fanvue.com)

🔗 [**API Access & Usage Policy**](/api-policy)