Pro API and Public API
| Feature | Pro API v2 | Public API |
|---|---|---|
| Search by email and username | ✓ | ✓ |
| Breach sources and exposed data types | ✓ | ✓ |
| Passwords and full records | ✓ | — |
| Search by password and domain | ✓ (Enterprise) | — |
| Requests per second | 3, upgradable | 1 |
| Authentication | API key | none |
| Price | from $9.99 / month | free, including commercial use |
What you can search by
Email, username, phone
Detected automatically, no type needed. Keyword search finds every address that starts with a given name.
Email hash
Send the SHA-256 of a lower-cased address (24 characters are enough) and never pass the email itself.
Domain
Every leaked account on a domain in one query — for exposure checks of a company or a vendor. Enterprise.
Password and password hash
Reverse search: start from a password and see the accounts that used it. Enterprise.
Origin
Search info-stealer logs by the site the credentials were entered on. Enterprise.
Pagination
Up to 1,000 rows per request, with an offset of up to 2,500 for the next pages.
Your first request
Pro API v2
curl "https://leakcheck.io/api/v2/query/example@example.com" \
-H "X-API-Key: $LEAKCHECK_APIKEY"Public API
curl "https://leakcheck.io/api/public?check=example@example.com"Also available: the official Python package with a command-line tool (pip install leakcheck), an OpenAPI 3.1 spec and the full API documentation with samples in several languages.
API questions
The Public API is free, including for commercial use: it returns where an identifier was leaked and which types of data were exposed, but not the data itself. Commercial use needs a “Powered by LeakCheck” link on your site. The Pro API, with full records and passwords, comes with the Monthly, Lifetime and Enterprise plans.
The Pro API allows 3 requests per second on any plan, and you can raise that in your account settings. The Public API allows 1 request per second.
Send your API key in the X-API-Key header, or as the key query parameter. You create the key in your account settings.
Reverse searches by password, password hash and domain, and the search of info-stealer logs by origin — the site the credentials were entered on.
Up to 1,000 rows, set with the limit parameter. Use offset (up to 2,500) to page through larger result sets.
Yes — email the@leakcheck.net with a short description of your project and we will agree the terms.
