Skip to main content
POST
Get leak information by ID

Overview

Retrieve detailed information for a specific leak by its ID. This endpoint provides access to complete leak details including unmasked passwords after domain verification.
Password Unmasking: Passwords are displayed unmasked after domain verification. Without verification, passwords appear as ***MASKED***.

Authentication & Authorization

Access Control

  • Personal leaks: Always accessible if the leak belongs to your email
  • Employee/Customer leaks: Requires domain verification for the associated domain
  • Password unmasking: Requires domain verification

Leak ID Format

The leak ID must be a 32-character MD5 hash (e.g., b3652f2555841f7652badd9804859f4e).

Request Body

Response Examples

Successful Response

Error Responses

Invalid Leak ID Format

Leak Not Found

Access Denied

Data Fields Explained

Password Unmasking Rules

Passwords are unmasked after domain verification: Without domain verification, passwords show as ***MASKED***.

Usage Examples

Get leak information

Security Considerations

Privacy Protection

  • Access is strictly controlled based on domain verification
  • All access attempts are logged for security auditing

Data Sensitivity

  • Leak information contains sensitive credential data
  • Ensure secure handling and storage of retrieved information
  • Consider implementing additional encryption for stored leak details

Rate Limiting

  • This endpoint may have rate limits to prevent abuse
  • Implement proper error handling for rate limit responses

Authorizations

X-API-Key
string
header
required

Body

application/json
leakid
string
required

32-character MD5 hash identifying the leak

Pattern: ^[a-fA-F0-9]{32}$
Example:

"b3652f2555841f7652badd9804859f4e"

Response

Leak information retrieved successfully

success
boolean
Example:

true

data
object