X-API-Key header or as a
?key= query parameter.
Parameters
string
required
The value to search for — an email address, username, phone number, hash,
domain, etc. Minimum 3 characters.
string
Your API key, as an alternative to the
X-API-Key header.string
Search type. When omitted, the type is detected automatically (works for
email, username, phone number and hash). Other types — such as
domain,
keyword, origin or password — must be set explicitly. See
Search types for the full list.integer
default:"100"
Maximum number of rows to return. Cannot exceed 1000.
integer
default:"0"
Number of rows to skip, for pagination. Cannot exceed 2500.
Sample request
Sample response
Response fields
integer
Number of rows found and returned.
integer
The number of queries remaining on your account.
array
Array of associative arrays containing the results of the search. Each row
carries a
source object (breach name, breach_date, and unverified /
passwordless / compilation flags) plus a fields list naming the data
present in that row. Info-stealer log rows additionally carry a collected
string (an exact YYYY-MM-DD, or "April 2024 or earlier" for older
bulk-imported records) since they have no source breach_date.Rows can contain various data from breached databases. The list includes but
is not limited to:
username, password, first_name, last_name, dob,
address, zip, phone, name.