Skip to main content
POST
/
api
/
agent
/
breaches
Check Breaches
curl --request POST \
  --url https://encrata.com/api/agent/breaches \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "email": "<string>"
}
'
{
  "email": "<string>",
  "count": 123,
  "services": [
    "<string>"
  ],
  "exposed_data": [
    "<string>"
  ],
  "message": "<string>"
}

​
Authentication

Requires an API key in the Authorization header. 
Authorization: Bearer YOUR_API_KEY

​
Request

​
email
string
required
The email address to check for data breaches. The legacy key e is still accepted.

​
Example request

curl -X POST "https://encrata.com/api/agent/breaches" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"email": "test@example.com"}'

​
Response

​
email
string
The email address that was checked.
​
count
number
Number of known data breaches the email appears in.
​
services
string[]
Names of breached services (e.g. ["LinkedIn", "Adobe"]). Only present when count > 0.
​
exposed_data
string[]
Types of data exposed (e.g. ["Passwords", "Email addresses"]). Only present when count > 0.
​
message
string
Human-readable summary.

​
Example responses

No breaches
{
  "email": "safe@example.com",
  "count": 0,
  "message": "No known data breaches."
}
Breaches found
{
  "email": "user@example.com",
  "count": 3,
  "services": ["LinkedIn", "Adobe", "Dropbox"],
  "exposed_data": ["Email addresses", "Passwords", "Usernames"],
  "message": "Found in 3 breach(es)."
}

​
Notes

  • This endpoint is free — no credits are deducted.
  • Data sourced from Have I Been Pwned.
  • Rate limited to 60 requests per minute.