Skip to main content
POST
Check Breaches

Authentication

Requires an API key in the Authorization header.

Request

string
required
The email address to check for data breaches.

Example request

Response

Returns the canonical breach shape shared with the dashboard, so the CLI and this endpoint all return identical fields.
string
The email address that was checked.
boolean
Whether the email appears in one or more known breaches.
object
The canonical breach detail object.
number
Credits charged for this request. 1 on a fresh charge, or 0 when you were already charged for this address within the billing window (a free repeat).

Errors

Errors return a JSON body of the form {"error": "<message>"} with the matching HTTP status code.

Credits

Each check costs 1 credit. Billing is per-customer: 1 on the first check of an address, 0 for repeats within the billing window. See Credits.

Bulk

To check a list of emails today, call this endpoint once per address (it is rate limited to 60 requests per minute, and repeats within the billing window are free at credits: 0).
A dedicated async breach-jobs pipeline (/api/agent/breach-jobs, mirroring Email Validity and Email Identity) is not available yet. Until it ships, use the single endpoint above for programmatic bulk checks.