API Overview

Base URL

https://encrata.com

Endpoints

Method	Path	Description	Auth
`POST`	`/api/agent/lookup`	Full email lookup	API Key
`POST`	`/api/agent/validate`	Email deliverability check (free)	API Key
`POST`	`/api/smtp/verify`	SMTP mailbox verification	API Key
`POST`	`/api/agent/breaches`	Data breach check (free)	API Key
`POST`	`/api/agent/ip`	IP intelligence	API Key
`POST`	`/api/agent/phone`	Phone number intelligence	API Key
`POST`	`/api/agent/company`	Company search	API Key
`POST`	`/api/agent/domain`	Domain search	API Key
`POST`	`/api/agent/darkweb`	Dark web search	API Key
`POST`	`/api/agent/darkweb-crawl`	Dark web onion crawl	API Key
`POST`	`/api/agent/onion-search`	Find onion sites by keyword	API Key
`POST`	`/api/agent/onion-render`	Fetch an onion page over Tor	API Key
`POST`	`/api/agent/google`	Google search	API Key
`POST`	`/api/agent/dork`	Google dork pack (free)	API Key
`POST`	`/api/agent/duckduckgo`	DuckDuckGo instant answer (free)	API Key
`GET`	`/api/agent/monitors`	List monitors	API Key
`POST`	`/api/agent/monitors`	Create monitor	API Key
`GET`	`/api/agent/monitors/{id}`	Get monitor	API Key
`DELETE`	`/api/agent/monitors/{id}`	Delete monitor	API Key
`POST`	`/api/agent/monitors/{id}/run`	Trigger monitor run	API Key
`GET`	`/api/agent/monitoring/runs`	List all runs	API Key
`GET`	`/api/agent/monitoring/results`	List all results	API Key
`GET`	`/api/agent/lists`	List contact lists	API Key
`GET`	`/api/agent/lists/{id}`	Get contact list	API Key
`POST`	`/mcp`	MCP server (Model Context Protocol)	API Key
`GET`	`/api/health`	Health check	None

The public API is the API-key surface above (/api/agent/* and /mcp). Bulk operations, API-key management, webhooks, and workflows are managed from your dashboard and are documented for reference; those routes use session authentication rather than an API key.

Rate limits

Endpoint	Limit	Window
`/api/agent/lookup`	60 requests	1 minute
`/api/agent/validate`	60 requests	1 minute
`/api/agent/breaches`	60 requests	1 minute
`/api/agent/ip`	60 requests	1 minute
`/api/agent/phone`	60 requests	1 minute
`/api/agent/domain`	30 requests	1 minute
`/api/agent/company`	30 requests	1 minute
`/api/agent/google`	30 requests	1 minute
`/api/agent/darkweb`	30 requests	1 minute
`/api/agent/monitors`	60 requests	1 minute
`/api/webhooks/*`	30 requests	1 minute

When rate limited, the API returns 429 Too Many Requests with these headers:

Header	Description
`X-RateLimit-Limit`	Maximum requests allowed in the window
`X-RateLimit-Remaining`	Requests remaining in current window
`X-RateLimit-Reset`	Unix timestamp when the window resets
`Retry-After`	Seconds to wait before retrying (only on 429)

Response format

All endpoints return JSON. The agent endpoint uses compact single-letter keys to minimize token usage when consumed by AI agents.

Standard errors

{
  "error": "Invalid email address"
}

Agent errors

{
  "c": 400,
  "m": "bad email"
}

Credits

Each lookup costs 1 credit.

Data pipeline

Each lookup runs multiple enrichment services in parallel for minimal latency:

Email Input
├── Profile Enrichment    → Identity, company, education, skills
├── Web Intelligence      → News, scholar, patents, videos, social links
├── Breach Detection      → Data breach history
├── Email Verification    → Deliverability check
└── Disposable Detection  → Throwaway email check

→ Merge & deduplicate results
→ Cache in database
→ Return enriched PersonInfo

Overview

Lookups

Bulk Operations

Workflows

Monitors

Contact Lists

API Keys

Webhooks

Resources

Base URL

Endpoints

Rate limits

Response format

Standard errors

Agent errors

Credits

Data pipeline

​Base URL

​Endpoints

​Rate limits

​Response format

​Standard errors

​Agent errors

​Credits

​Data pipeline

Base URL

Endpoints

Rate limits

Response format

Standard errors

Agent errors

Credits

Data pipeline