v2

latestOpenAPI 3.0.3Creative Commons Attribution 4.0 International2026-08-01171171.3 KB

Get all breached email addresses for a domain

Available on Core and Pro subscriptions. Returns all breached email aliases on a verified domain and the breach names they have appeared in. The domain must already have been added to the domain search dashboard and successfully verified. Sensitive breaches are returned because this API is only available after domain control has been demonstrated.

get/breacheddomain/{domain}

Path parameters

domainstring required

The domain to be searched for. Must be a verified domain in the domain search dashboard.

Headers

user-agentstring required

User agent string identifying the consuming application. Required on all documented requests, including unauthenticated endpoints; missing user agents may receive HTTP 403 responses.

Response

Mapping of email aliases to breach names. For each breached email address on the domain, only the alias is returned along with each breach it has appeared in. Only the name attribute of the breach is returned.

object required