igsub.me Free API

100% free — no fees, no paid plans, no API key, no credit card. Free for everyone, forever.

A 100% free (no fees, no paid plans, no API key), public, browser-only JSON API for growing YouTube channels (subscribers, likes, comments, comment likes) and, when enabled, Instagram / TikTok / X / Facebook posts. There is no API key: your web page calls the API directly with fetch() (CORS), the visitor signs in with their own Google account, and every order spends that visitor's free credits. It is the same API our Blogger theme and our own sites use, so you can build a complete site with it: home page with order form, channel page, video page, order tracking page and account page. Every order is protected by hCaptcha.

Last updated 2026-10-25. Base URL https://igsub.me.

Quick start

Copy this into any page (inside <script type="module">). It signs the visitor in, reads the balance, finds a channel, passes hCaptcha, sends 100 subscribers and tracks the order.

// igsub.me public API — minimal client (no key, browser only)
const API = 'https://igsub.me';
const MY_REF = 'YOURCODE';     // your invite code: +1000 credits for every new user who signs in here
let token = localStorage.getItem('fs_token') || '';

async function api(path, { body, headers = {} } = {}) {
  const h = { 'X-FS-Mode': 'token', ...headers };
  if (body) h['Content-Type'] = 'application/json';
  if (token) h['Authorization'] = 'Bearer ' + token;
  const r = await fetch(API + path, {
    method: body ? 'POST' : 'GET',
    headers: h,
    body: body ? JSON.stringify(body) : undefined,
    mode: 'cors',
    credentials: 'omit',
  });
  const data = await r.json().catch(() => ({}));
  if (r.status === 401 && (data.kod === 'oturum_yok' || data.kod === 'kullanici_yok')) {
    token = ''; localStorage.removeItem('fs_token');          // expired -> sign in again
  }
  return { ok: r.ok, status: r.status, data };
}

// 1) hCaptcha — solved inside an igsub.me frame (no keys on your site)
function captcha() {
  return new Promise(resolve => {
    const box = document.createElement('div');
    box.style.cssText = 'position:fixed;inset:0;background:rgba(0,0,0,.5);display:grid;place-items:center;z-index:9999';
    box.innerHTML = '<iframe src="' + API + '/captcha/frame.html" style="width:400px;max-width:95vw;height:560px;border:0;border-radius:12px;background:#fff"></iframe>';
    document.body.appendChild(box);
    function onMsg(e) {
      if (e.origin !== API || !e.data || !e.data.fsCaptcha) return;
      window.removeEventListener('message', onMsg); box.remove(); resolve(e.data.fsCaptcha);
    }
    window.addEventListener('message', onMsg);
    box.onclick = e => { if (e.target === box) { window.removeEventListener('message', onMsg); box.remove(); resolve(''); } };
  });
}

// 2) Sign in with Google (YouTube TV code)
async function signIn(onCode) {
  const ref = new URLSearchParams(location.search).get('ref') || MY_REF;
  const s = await api('/api/auth/device/start' + (ref ? '?ref=' + encodeURIComponent(ref) : ''), { body: {} });   // no captcha for sign-in
  if (!s.ok) throw new Error(s.data.error);
  onCode(s.data.user_code, s.data.qr_url, s.data.qr_image);   // show code + link/QR
  const until = Date.now() + s.data.expires_in * 1000;
  while (Date.now() < until) {
    await new Promise(r => setTimeout(r, Math.max(3, s.data.interval) * 1000));
    const p = await api('/api/auth/device/poll', { headers: { 'X-FS-Device': s.data.device_token } });
    if (p.data.status) { token = p.data.session_token; localStorage.setItem('fs_token', token); return; }
    if (['expired', 'no_flow', 'only gmail'].includes(p.data.message)) throw new Error(p.data.message);
  }
  throw new Error('expired');
}

// 3) Balance
const { data: { kredi } } = await api('/api/kredi');           // kredi.kredi = credits

// 4) Find a channel and order 100 subscribers
const ch = await api('/api/resolve', { body: { q: 'https://www.youtube.com/@channel' } });
const captcha_token = await captcha();
const order = await api('/api/order', { body: { tip: 'sub', hedef_kanal: ch.data.channel_id, adet: 100, captcha_token } });
if (!order.ok) console.log(order.data.kod, order.data.error);  // e.g. kredi_yok

// 5) Track it
const timer = setInterval(async () => {
  const o = (await api('/api/order/' + order.data.order_id)).data;
  console.log(o.status, o.biten_sayac + '/' + o.adet);
  if (['completed', 'canceled', 'failed'].includes(o.status)) clearInterval(timer);
}, 10000);

Rules & headers

• Base URL is always https://igsub.me — every request goes there. All responses are JSON (UTF-8).
• Send the header X-FS-Mode: token on every request and never send cookies (credentials: "omit").
• Without sign-in a visitor can find a channel/video and send 100 free YouTube subscribers once per channel (hCaptcha required). Everything else — likes, comments, other platforms, larger quantities, account, credits, history — requires Google sign-in.
• After sign-in send Authorization: Bearer <session_token> on every request. The token is valid 30 days.
• Browser only: requests must come from a real web page (the browser sends Origin, Sec-Fetch-Mode: cors and an OPTIONS preflight). Server-side calls (PHP, cURL, Python, Node, bots) get 403 browser_required.
• Use POST with Content-Type: application/json for request bodies; unknown body fields are rejected.
• hCaptcha is required for every order (body field captcha_token) and for invite codes and channel credits (header X-FS-Captcha). Sign-in has no captcha. You need no captcha key: show https://igsub.me/captcha/frame.html in an iframe (it opens in the visitor's browser language; add ?hl=xx to force one), the visitor solves it there, and you receive the token via postMessage. One token = one call. Never put any secret in your page; none is needed.
• Errors are { "kod": "<code>", "error": "<English message>", "hata": "<same>" } with a matching HTTP status. Translate on your side by kod.
• The Accept-Language header (sent automatically by browsers) selects the language of YouTube titles/descriptions where available.
• Accounts and credits are shared: a user who signs in on your site has the same account and balance as on igsub.me.

fetch options: mode: 'cors', credentials: 'omit'. Origin, User-Agent, Accept-Language and Sec-Fetch-* are added by the browser automatically — do not try to set them.

Sign-in flow

Sign-in uses the YouTube TV device code: the visitor opens youtube.com/qr/activate (or scans a QR code with their phone), signs in with Google and approves. Your page never sees a password.

Visitor            Your page (browser)                      https://igsub.me
  |  click "Sign in"  |                                         |
  |------------------>| POST /api/auth/device/start (no captcha)|
  |                   |---------------------------------------->|
  |                   |<-- user_code, qr_url, device_token -----|
  |<-- show code -----|                                         |
  |  opens youtube.com/qr/activate, approves with Google        |
  |                   | GET /api/auth/device/poll (every 5s)    |
  |                   |   X-FS-Device: device_token             |
  |                   |---------------------------------------->|
  |                   |<-- { status: true, session_token } -----|
  |                   | save token -> Authorization: Bearer ... |
  |  paste channel    | POST /api/resolve { q }                 |
  |                   |<-- channel_id, videos ------------------|
  |  solves hCaptcha  | iframe igsub.me/captcha/frame.html     |
  |                   |<-- postMessage { fsCaptcha: token } ----|
  |  click "Send"     | POST /api/order { tip, hedef_kanal, adet, captcha_token }
  |                   |<-- order_id, status: queued ------------|
  |                   | GET /api/order/{order_id} (every 10s)   |
  |                   |<-- status, biten_sayac / adet ----------|

1. POST /api/auth/device/start (no captcha; optionally ?ref=INVITECODE) → show user_code, a button to qr_url and the qr_image.
2. Every interval seconds: GET /api/auth/device/poll with header X-FS-Device: device_token.
3. When status is true, save session_token (e.g. localStorage) and send it as Authorization: Bearer.
4. On next visits call GET /api/auth/me; a 401 means the token expired — delete it.

Free 100 subscribers (no sign-in)

• Any visitor can send 100 free YouTube subscribers without signing in — no account, no credits, no API key.
• Step 1: POST /api/resolve { "q": "<channel link, @handle or name>" } → channel_id (no Authorization header needed).
• Step 2: show the hCaptcha frame (https://igsub.me/captcha/frame.html) and wait for the token.
• Step 3: POST /api/order { "tip": "sub", "hedef_kanal": "<channel_id>", "captcha_token": "<token>", "fingerprint": "<stable random id>" } → order_id. Quantity is always 100.
• Step 4: GET /api/order/{order_id} every 10 s to show live progress (no sign-in needed).
• Limits: once per channel (lifetime), 1 free order per hour per visitor (IP + fingerprint), 1 free order per hour per channel, and a shared hourly cap for all external sites. When a limit is hit the API answers 401 giris_gerekli or 429 kanal_cooldown — then offer Google sign-in (free credits, every service).
• Only tip "sub" works without sign-in; likes, comments, other platforms and quantities above 100 need sign-in.

// no Authorization header — anonymous visitor
const ch = await api('/api/resolve', { body: { q: 'https://youtube.com/@channel' } });
const captcha_token = await captcha();                       // igsub.me hCaptcha frame
let fp = localStorage.getItem('fs_fp');
if (!fp) { fp = crypto.randomUUID(); localStorage.setItem('fs_fp', fp); }
const o = await api('/api/order', { body: { tip: 'sub', hedef_kanal: ch.data.channel_id, captcha_token, fingerprint: fp } });
// o.data.order_id -> GET /api/order/{order_id}; on 401 giris_gerekli / 429 kanal_cooldown offer Google sign-in

Credits

• Without sign-in: 100 free YouTube subscribers once per channel (max 1 free order per hour per visitor). No credits needed.
• Credits are free. They are not money and cannot be bought or withdrawn.
• Every signed-in user gets free credits every hour (gunluk_hak, normally 1000) plus a welcome bonus on the first sign-in.
• Each friend who signs in with the user's invite link/code gives +1000 credits. Invite link: https://igsub.me/?ref=<referans_kod> (or pass ref to /api/auth/device/start on your own site).
• Each extra YouTube channel on the user's Google account adds +1000 credits per hour (POST /api/kredi/kanal-topla once per hour).
• An order costs adet × kredi_carpani credits. If dispatch fails, credits are refunded automatically (iade).
• Some services unlock only after a number of invites (min_referans).

Earn credits with your site

Your site can earn free credits for you: add your own invite code and every new user who signs in there counts as your invite.

• Put your own invite code on your site and earn +1000 credits for every new user who signs in there.
• Get your code: sign in on igsub.me (or on your own site) and read referans_kod from GET /api/kredi — it is also shown on the account page.
• Send it with every sign-in (no captcha needed): POST /api/auth/device/start?ref=YOURCODE. In the example page just set window.FS_REF = 'YOURCODE'.
• If a visitor arrives with someone else's invite link (?ref=…), that link wins; otherwise your code is used.
• A user can be invited only once (first invite counts). Limits against abuse: max 30 credited sign-ins per code per day and max 2 per network (IP) per day.
• Spend the credits like any user: orders for your own channels on any of our sites. Credits are free and cannot be sold or withdrawn.
• Your visitors also get their own invite code and link (https://igsub.me/?ref=THEIRCODE) to earn credits themselves.

// sign-in on your site, credited to you
POST https://igsub.me/api/auth/device/start?ref=YOURCODE
X-FS-Mode: token

// example page (starter-kit.html)
<script>window.FS_REF = 'YOURCODE';</script>

hCaptcha (required for orders, invites and credits — not for sign-in)

Every POST /api/order needs a fresh captcha_token in the body, and POST /api/referans/uygula and POST /api/kredi/kanal-topla need one in the X-FS-Captcha header. Sign-in (POST /api/auth/device/start) has no captcha. Our hCaptcha site key works only on igsub.me, so the check runs inside a small igsub.me page that you show in an iframe. You never need a captcha key or secret.

1. When the visitor clicks “Send”, open a modal with <iframe src="https://igsub.me/captcha/frame.html">. It opens in the visitor's own browser language automatically; add ?hl=tr (any language code) to force one and theme=dark for dark mode. Give it about 400×560 px so the challenge fits.
2. Listen for message events from origin https://igsub.me. When the visitor passes, you receive { fsCaptcha: "<token>" } ({ fsCaptchaExpired: true } if it expired before use).
3. Close the modal and send the token: captcha_token in POST /api/order, or header X-FS-Captcha for invite / credit calls. A token works once; get a new one for each call.
4. On captcha_yok / captcha_ret show the check again.

<!-- auto language (visitor's browser) -->
<iframe src="https://igsub.me/captcha/frame.html"></iframe>
<!-- forced Turkish, dark -->
<iframe src="https://igsub.me/captcha/frame.html?hl=tr&theme=dark"></iframe>

window.addEventListener('message', (e) => {
  if (e.origin !== 'https://igsub.me' || !e.data) return;
  if (e.data.fsCaptcha) placeOrder(e.data.fsCaptcha);   // -> POST /api/order { ..., captcha_token }
});

Endpoints

21 endpoints in 6 groups. All paths are relative to https://igsub.me. 🔒 = sign-in required · ◐ = works without sign-in (free 100 subscribers flow) · — = public.

{
  "domain": "igsub.me",
  "ad": "iGSub",
  "varsayilan_dil": "en",
  "diller": ["en", "tr", "es", "pt", "ar", "fr", "de", "ru"],
  "secili_dil": "en",
  "telegram_kanal": "https://t.me/...",
  "telegram_bot": "https://t.me/..."
}

{
  "servisler": [
    { "tip": "sub", "platform": "youtube", "tur": "sub", "min_adet": 10, "max_adet": 1000000, "kredi_carpani": 1, "min_referans": 0, "aktif": true, "sira": 0 },
    { "tip": "like", "platform": "youtube", "tur": "like", "min_adet": 10, "max_adet": 1000000, "kredi_carpani": 50, "min_referans": 3, "aktif": true, "sira": 6 },
    { "tip": "comment", "platform": "youtube", "tur": "comment", "min_adet": 1, "max_adet": 1000000, "kredi_carpani": 10, "min_referans": 100, "aktif": true, "sira": 7 },
    { "tip": "comment_like", "platform": "youtube", "tur": "comment_like", "min_adet": 10, "max_adet": 1000000, "kredi_carpani": 15, "min_referans": 5, "aktif": true, "sira": 8 },
    { "tip": "ig_views", "platform": "instagram", "tur": "views", "min_adet": 100, "max_adet": 2147483647, "kredi_carpani": 3, "min_referans": 0, "aktif": false, "sira": 1 }
  ]
}

POST https://igsub.me/api/auth/device/start

{}

{
  "ok": true,
  "user_code": "ABC-DEF-GHI",
  "qr_url": "https://youtube.com/qr/activate/ABC-DEF-GHI",
  "qr_image": "https://api.qrserver.com/v1/create-qr-code/?size=280x280&data=...",
  "verification_url": "https://www.google.com/device",
  "interval": 5,
  "expires_in": 1800,
  "device_token": "eyJ...signed"
}

{ "status": false, "message": "not approved yet" }

{ "status": true, "redirect_url": "/account", "session_token": "eyJ1aWQiOjEy...signed" }

{
  "ok": true,
  "kullanici": { "id": 156, "email": "[email protected]", "ad": "Name", "avatar": "https://lh3.googleusercontent.com/...", "son_giris": "2026-10-25T07:55:40Z" }
}

POST https://igsub.me/api/auth/logout

{}

{ "ok": true }

{
  "ok": true,
  "kredi": { "kredi": 1000, "bonus_kredi": 0, "referans_kod": "8E6WNYMQ", "davet_sayisi": 0, "kanal_sayisi": 0, "gunluk_hak": 1000, "sonraki_sifirlama": "2026-10-25T08:00:00Z" }
}

{
  "ok": true,
  "hareketler": [
    { "id": 991, "tur": "siparis", "miktar": -100, "aciklama": "tip=sub adet=100x1", "order_id": 3927, "olusturma": "2026-10-24T18:05:43Z" },
    { "id": 990, "tur": "saatlik", "miktar": 1000, "aciklama": "hourly", "olusturma": "2026-10-24T18:00:00Z" }
  ]
}

POST https://igsub.me/api/referans/uygula

{ "kod": "AB12CD34" }

{ "ok": true, "veren_id": 12, "bonus": 1000 }

POST https://igsub.me/api/kredi/kanal-topla

{}

{ "ok": true, "kanal_sayisi": 3, "saatlik_kazanc": 3000, "kredi": 4000 }

{ "ok": true, "kanal_sayisi": 3, "saatlik_kazanc": 3000, "beklemede": true, "kalan_saniye": 2710 }

POST https://igsub.me/api/resolve

{ "q": "https://www.youtube.com/@MrBeast" }

{
  "tip": "kanal",
  "channel_id": "UCX6OQ3DkcsbYNE6H8uQQuVA",
  "ad": "MrBeast",
  "handle": "mrbeast",
  "avatar": "https://yt3.ggpht.com/...",
  "abone_sayi": 523000000,
  "video_sayi": 900,
  "aciklama": "...",
  "yontem": "handle",
  "videolar": [ { "id": "dQw4w9WgXcQ", "baslik": "Video title", "kapak": "https://i.ytimg.com/vi/dQw4w9WgXcQ/hqdefault.jpg", "bilgi": "12M views" } ],
  "alternatifler": [ { "channel_id": "UC...", "ad": "MrBeast Gaming", "avatar": "...", "abone_sayi": 45000000 } ]
}

{
  "tip": "video",
  "video_id": "dQw4w9WgXcQ",
  "channel_id": "UCuAXFkgsw1L7xaCfnd5JJOw",
  "ad": "Channel name",
  "video": { "id": "dQw4w9WgXcQ", "baslik": "Title", "aciklama": "...", "kapak": "...", "goruntulenme": 1500000000, "sure_sn": 213, "yazar": "Channel name" }
}

{ "kanallar": [ { "channel_id": "UC...", "ad": "Cooking Channel", "avatar": "https://...", "abone_sayi": 120000 } ] }

{
  "kanal": { "channel_id": "UCX6OQ3DkcsbYNE6H8uQQuVA", "handle": "mrbeast", "ad": "MrBeast", "aciklama": "...", "avatar": "...", "banner": "", "abone_sayi": 523000000, "video_sayi": 900, "ulke": "", "kategori": "" },
  "videolar": [ { "video_id": "...", "channel_id": "UC...", "baslik": "...", "kapak": "...", "goruntulenme": 1000000, "sure_sn": 900, "sira": 1 } ]
}

{ "channel_id": "UC...", "limit": 30, "offset": 30, "videolar": [ ... ] }

{ "channel_id": "UC...", "sekme": "shorts", "videolar": [ { "video_id": "...", "baslik": "...", "kapak": "..." } ], "devam": "4qmFsgK..." }

{
  "video": { "video_id": "dQw4w9WgXcQ", "baslik": "Title", "aciklama": "...", "channel_id": "UC...", "kapak": "https://i.ytimg.com/vi/dQw4w9WgXcQ/hqdefault.jpg", "goruntulenme": 1500000000, "sure_sn": 213, "etiketler": ["music"], "yazar": "Channel" },
  "kanal": { "channel_id": "UC...", "ad": "Channel", "avatar": "...", "abone_sayi": 4000000 }
}

POST https://igsub.me/api/order

{ "tip": "sub", "hedef_kanal": "UCX6OQ3DkcsbYNE6H8uQQuVA", "adet": 100, "captcha_token": "P1_eyJ0eXAi..." }

{ "tip": "like", "hedef_kanal": "UCX6OQ3DkcsbYNE6H8uQQuVA", "hedef_video": "dQw4w9WgXcQ", "adet": 50, "captcha_token": "P1_eyJ0eXAi..." }

{ "tip": "tiktok_views", "hedef_video": "https://www.tiktok.com/@user/video/7300000000000000000", "adet": 1000, "captcha_token": "P1_eyJ0eXAi..." }

{ "ok": true, "order_id": "c43a7ec92aef79f3e7f96c1b55125d44", "durum": "kuyrukta", "status": "queued", "adet": 100 }

{
  "order_id": "c43a7ec92aef79f3e7f96c1b55125d44",
  "tip": "sub",
  "durum": "calisiyor",
  "status": "in_progress",
  "adet": 100,
  "baslangic_sayac": 18300,
  "biten_sayac": 40,
  "hedef_kanal": "UCKtuGDfMjgNe5M9Eu_XsdRw",
  "hedef_video": "",
  "olusturma": "2026-10-24T18:05:43Z",
  "biten": null
}

{
  "order_id": "c43a7ec9...",
  "olaylar": [
    { "id": 1, "olay": "olusturuldu", "detay": "tip=sub adet=100", "ts": "2026-10-24T18:05:43Z" },
    { "id": 2, "olay": "kuyruga_alindi", "detay": "ref=...", "ts": "2026-10-24T18:05:44Z" }
  ]
}

{
  "ok": true,
  "siparisler": [
    { "id": 3927, "public_token": "c43a7ec9...", "platform": "youtube", "tip": "sub", "hedef_kanal": "UC...", "hedef_video": "", "adet": 1000, "durum": "tamamlandi", "status": "completed", "baslangic_sayac": 18300, "biten_sayac": 1000, "son_olay": "kuyruga_alindi", "olusturma": "2026-10-24T18:05:43Z", "biten": "2026-10-24T18:41:02Z" }
  ]
}

{ "ok": true, "siparis": { ... }, "olaylar": [ ... ] }

{ "siparisler": [ { "tip": "sub", "adet": 100, "ad": "Al***", "saniye_once": 42 }, { "tip": "like", "adet": 50, "ad": "", "saniye_once": 95 } ] }

Data models

Order status

pending → queued → in_progress → completed. Final states: completed, canceled, failed. Responses also carry the internal name in durum.

Errors

Every error has an HTTP status and a body like { "kod": "kredi_yok", "error": "not enough credits", "hata": "not enough credits" }. Show your own text based on kod — this is how you translate the API into any language.

Rate limits & security

• On 429 rate_limit wait a few seconds and retry with exponential backoff; do not loop.
• Poll order progress every 8–15 seconds, never faster. Stop polling on final states.
• Cache /api/link-servisler and /api/site for the page session.
• Never ship secrets. The token belongs to the visitor; store it only in their browser.
• Server-side requests, headless browsers and bots are blocked; repeated abuse bans the IP automatically.

Build a full site

These are the exact pages of our Blogger theme. Use hash routes (#/channel/…) so it works on any static host, including Blogger.

Example page

Our Blogger theme as one HTML file — the same design and the same features: home page with service tabs and live deliveries, channel page with videos and Shorts, video page, order tracking with timeline, account page with credits, invites and history, Google sign-in, hCaptcha check, dark mode, header search and popular searches. Upload it as index.html anywhere and change “My Site” to your name. Built-in languages: English and Turkish (window.FS_DIL = 'tr'); all texts are inside the script.

FAQ

Changelog

For AI assistants

If you are an AI model helping someone build a site with this API: read /developers/llms.txt (full reference in Markdown) or import /developers/openapi.json (OpenAPI 3.1). Generate browser JavaScript only (fetch with X-FS-Mode: token and Authorization: Bearer), never server-side code, and never invent API keys.

Prefer the hosted tool? Use Instabayim1 directly.