Skip to main content
The Pro API v2 has a single lookup endpoint:
Requires an API key — in the X-API-Key header or as a ?key= query parameter.

Parameters

string
required
The value to search for — an email address, username, phone number, hash, domain, etc. Minimum 3 characters.
string
Your API key, as an alternative to the X-API-Key header.
string
Search type. When omitted, the type is detected automatically (works for email, username, phone number and hash). Other types — such as domain, keyword, origin or password — must be set explicitly. See Search types for the full list.
integer
default:"100"
Maximum number of rows to return. Cannot exceed 1000.
integer
default:"0"
Number of rows to skip, for pagination. Cannot exceed 2500.

Sample request

Sample response

Or, if nothing was found:

Response fields

integer
Number of rows found and returned.
integer
The number of queries remaining on your account.
array
Array of associative arrays containing the results of the search. Each row carries a source object (breach name, breach_date, and unverified / passwordless / compilation flags) plus a fields list naming the data present in that row. Info-stealer log rows additionally carry a collected string (an exact YYYY-MM-DD, or "April 2024 or earlier" for older bulk-imported records) since they have no source breach_date.
Rows can contain various data from breached databases. The list includes but is not limited to: username, password, first_name, last_name, dob, address, zip, phone, name.