Security Awareness Project

Unofficial Throne API

Exposing security vulnerabilities and advocating for proper API support in the Throne platform.

The Problem

Critical issues that prompted the creation of this project

Exposed Database

Possibly sensitive creator data is publicly accessible including followers, following, gifters, gift amounts (even when hidden), referral chains, saved for later, hidden, cancelled gifts and more. This affects ALL creators on the platform.

No Official API

Despite community requests, the platform refuses to provide a documented public API. Developers are forced to work with exposed endpoints directly.

Raising Awareness

This project exists to highlight these security and accessibility issues. If data is exposed anyway, developers should at least have structured access.

The Better Solution

What we encourage the platform to do

Secure the Database

Implement proper access controls to protect creator data

Provide an Official API

Create documented, versioned endpoints for developers

Support the Developer Community

Foster innovation by enabling legitimate integrations

"Until proper solutions are implemented, this unofficial API will continue to exist."

This is an independent project and is not affiliated with or endorsed by the original platform.