Response Fields

The Lookup API returns a rich profile object with 48 selectable fields across 7 categories. You can request specific fields using the fields parameter, or omit it to get everything.

In the Sandbox, hover over any field name to see a short description. This page provides the full reference.

How field selection works

Pass a fields array in your request body to receive only the data you need. This reduces response size and speeds up processing.

{
  "email": "satya@microsoft.com",
  "fields": ["first_name", "last_name", "company", "job_role", "breach_info"]
}

If fields is omitted or empty, all fields are returned.

Data sources

Encrata aggregates data from multiple sources in a single API call:

Source	Fields powered	Description
Web Intelligence	Name, bio, company, job role, education, news, scholar, patents, videos, people_also_ask, related_topics, company_info	Structured extraction from web search results, knowledge graphs, and Google Places
Professional Networks	Name, job role, company, industry, socials, education	Professional profile enrichment via ContactOut
Email Validation	validity	Real-time mailbox verification via MillionVerifier
Breach Database	breach_info, breach_exposed_data	Breach history from Have I Been Pwned (HIBP)
Account Detection	registered_services	Probes 219+ platforms to detect where the email is registered
IP Intelligence	location, security, ASN, company, domains, timezone, threat, malware, reverse_dns, network, ports, blocklist, cloud, bgp, certificates, peering, fraud, threat_feeds	Geolocation, threat detection, abuse reports, malware analysis, scanner classification, reverse DNS, WHOIS/RDAP allocation, open ports & CVEs (Shodan InternetDB + Censys), spam blocklists, cloud provider, BGP routing, crt.sh certificate transparency, PeeringDB operator/IXP context, proxy/fraud second opinions (proxycheck.io, IPQualityScore, Spur, Scamalytics, IPHub), and extra threat-intel feeds (AlienVault OTX, Pulsedive)

Person fields

Core identity and demographic data about the person.

Field	Type	Description	Example
`first_name`	string	Person’s first/given name	`"Satya"`
`middle_name`	string	Middle name, if available	`"Narayana"`
`last_name`	string	Last/family name	`"Nadella"`
`age`	string	Estimated age (derived from public records)	`"57"`
`gender`	string	Gender — `Male`, `Female`, or empty if unknown	`"Male"`
`ethnicity`	string	Predicted ethnic background	`"South Asian"`
`nationality`	string	Country of citizenship	`"American"`
`country`	string	Country where the person is currently based	`"United States"`
`city`	string	City where the person is currently based	`"Redmond"`
`birthplace`	string	City/country where the person was born	`"Hyderabad, India"`
`current_location`	string	Full current location string	`"Redmond, WA, US"`
`bio`	string	Short biography or description	`"Chairman and CEO of Microsoft..."`
`photo_url`	string	URL to the person’s profile photo	`"https://..."`
`interests`	string	Known hobbies, interests, or topics (comma-separated)	`"Cloud Computing, AI, Cricket"`

Work fields

Professional and career information.

Field	Type	Description	Example
`company`	string	Current employer or company name	`"Microsoft"`
`job_role`	string	Current job title or position	`"Chairman and CEO of Microsoft"`
`industry`	string	Industry sector	`"Technology"`
`website`	string	Personal website or portfolio URL	`"https://microsoft.com"`

Education fields

Academic background.

Field	Type	Description	Example
`education`	string	Comma-separated list of institutions attended	`"University of Wisconsin-Milwaukee, Manipal Institute of Technology"`
`education_level`	string	Highest education level achieved	`"Master's"`
`university`	string	Primary university or college	`"University of Wisconsin-Milwaukee"`
`field_of_study`	string	Major or area of study	`"Computer Science"`

Links to social media profiles. Empty string if not found.

Field	Type	Description	Example
`linkedin`	string	LinkedIn profile URL	`"https://linkedin.com/in/satyanadella"`
`twitter`	string	Twitter/X profile URL	`"https://twitter.com/satyanadella"`
`instagram`	string	Instagram profile URL	`""`
`facebook`	string	Facebook profile URL	`""`
`github`	string	GitHub profile URL	`""`

Company fields

Structured data about the person’s employer, sourced from Google Places and Knowledge Graph.

Field	Type	Description	Example
`company_name`	string	Official registered company name	`"Microsoft Corporation"`
`company_phone`	string	Company phone number	`"+1-425-882-8080"`
`company_address`	string	Company physical address	`"One Microsoft Way, Redmond, WA 98052"`
`company_website`	string	Company website URL	`"https://microsoft.com"`
`company_category`	string	Business category classification	`"Technology company"`
`company_rating`	number	Google Maps star rating (1.0–5.0)	`4.1`
`company_rating_count`	integer	Total number of Google reviews	`25000`
`company_price_level`	string	Price level indicator	`"$$"`
`company_latitude`	number	Company HQ latitude coordinate	`47.6396`
`company_longitude`	number	Company HQ longitude coordinate	`-122.1283`
`company_attributes`	object	Key-value pairs with extra info	`{"Founded": "1975", "CEO": "Satya Nadella"}`

Company fields are nested under company_info in the API response. In the Sandbox field selector, they appear as flat company_* fields for convenience.

Content fields

Media, publications, and web content related to the person.

news

Recent news articles mentioning the person. Returns an array of objects.

Sub-field	Type	Description
`title`	string	Article headline
`link`	string	Article URL
`date`	string	Publication date
`source`	string	Publisher name (e.g., “TechCrunch”, “Reuters”)

scholar

Academic papers and publications. Returns an array of objects.

Sub-field	Type	Description
`title`	string	Publication title
`link`	string	URL to the paper
`year`	integer	Year published
`cited_by`	integer	Number of citations
`published`	string	Publisher or journal info

videos

Video appearances — talks, interviews, presentations. Returns an array of objects.

Sub-field	Type	Description
`title`	string	Video title
`link`	string	Video URL
`date`	string	Upload or publish date
`source`	string	Platform (YouTube, Vimeo, etc.)
`channel`	string	Channel name
`duration`	string	Video length

patents

Patents and inventions filed. Returns an array of objects.

Sub-field	Type	Description
`title`	string	Patent title
`link`	string	Patent URL
`patent_id`	string	Patent ID or number
`date`	string	Filing or grant date
`inventor`	string	Inventor name
`assignee`	string	Assignee company

people_also_ask

Related questions from Google search results. Returns an array of objects.

Sub-field	Type	Description
`question`	string	The question text
`answer`	string	Answer snippet
`source`	string	Source website name
`link`	string	Source URL

related_topics

Related search queries. Returns a simple array of strings.

["satya nadella net worth", "satya nadella wife", "satya nadella salary"]

Security fields

Email security, breach exposure, and account detection.

validity

Email deliverability status. Returns a single string value.

Value	Meaning
`valid`	Mailbox exists and accepts email
`invalid`	Mailbox does not exist or rejects email
`risky`	Catch-all domain or temporary address
`unknown`	Could not determine (timeout, greylisting)
`disposable`	Disposable/throwaway email provider

breach_info

Data breach history powered by Have I Been Pwned. Returns an object.

Sub-field	Type	Description
`breach_count`	integer	Total number of breaches the email appears in
`services`	array	List of breached services (name, domain, breach_date, data_types)
`interests`	array	Inferred interest categories based on breach sources (e.g., Gaming sites → `{"category": "Gaming", "signal": 3}`)
`exposed_data`	array	All unique data types leaked across all breaches (e.g., `["Passwords", "Email addresses", "IP addresses"]`)

Each item in services:

Sub-field	Type	Description
`name`	string	Breach name (e.g., “LinkedIn”, “Adobe”)
`domain`	string	Domain of the breached service
`breach_date`	string	Date the breach occurred
`data_types`	array	Types of data exposed in this specific breach

breach_exposed_data

Shortcut to the exposed_data array inside breach_info — a flat list of all data types that were leaked across every breach (passwords, phone numbers, physical addresses, etc.).

registered_services

Detects which online services the email is registered on by probing login, registration, and password-reset flows across 219+ platforms (GitHub, Spotify, Netflix, Adobe, etc.).

Sub-field	Type	Description
`total_checked`	integer	Number of platforms probed
`registered_count`	integer	Number of platforms where the email is registered
`services`	array	List of registered service names
`recovery_emails`	array	Partial recovery emails discovered during probing
`recovery_phones`	array	Partial recovery phone numbers discovered during probing

Recovery data (partial emails/phones like s***a@outlook.com or +1***456) may be exposed by platforms during password reset flows. This is public information but should be handled carefully.

Response structure

The full API response wraps fields inside the person object:

{
  "email": "satya@microsoft.com",
  "person": {
    "first_name": "Satya",
    "last_name": "Nadella",
    "validity": "valid",
    "company": "Microsoft",
    "job_role": "Chairman and CEO of Microsoft",
    "socials": {
      "linkedin": "https://linkedin.com/in/satyanadella",
      "twitter": "https://twitter.com/satyanadella"
    },
    "company_info": {
      "name": "Microsoft Corporation",
      "rating": 4.1,
      "category": "Technology company"
    },
    "breach_info": {
      "breach_count": 2,
      "services": [{"name": "LinkedIn", "domain": "linkedin.com", "breach_date": "2012-05-05"}],
      "exposed_data": ["Email addresses", "Passwords"]
    },
    "registered_services": {
      "total_checked": 219,
      "registered_count": 8,
      "services": [{"name": "GitHub"}, {"name": "Spotify"}]
    },
    "news": [...],
    "scholar": [],
    "videos": [],
    "patents": []
  },
  "files": {
    "json": "/api/files/satya_at_microsoft_com.json",
    "csv": "/api/files/satya_at_microsoft_com.csv"
  }
}

Empty arrays ([]) and empty strings ("") indicate no data was found for that field. Objects like company_info and breach_info are omitted entirely if no data is available.

​How field selection works

​Data sources

​Person fields

​Work fields

​Education fields

​Social fields

​Company fields

​Content fields

​news

​scholar

​videos

​patents

​people_also_ask

​related_topics

​Security fields

​validity

​breach_info

​breach_exposed_data

​registered_services

​Response structure

How field selection works

Data sources

Person fields

Work fields

Education fields

Social fields

Company fields

Content fields

news

scholar

videos

patents

people_also_ask

related_topics

Security fields

validity

breach_info

breach_exposed_data

registered_services

Response structure