v1

latestOpenAPI 3.1.0License and Price2026-07-1722542.4 KB

Fetch results from internal live search

This is the API used by the “Export Leaked Accounts” tab of the Identity Portal. It only supports domains and email addresses as input.

The response is the same as for /live/search/internal, returning a status and the search job ID. In case a user makes a new export and the previous one shall be discarded; its search ID shall be specified in the “terminate” parameter to save system resources. Searches may consume Gigabytes of data, therefore any searches that are no longer required shall be terminated. Searches can also be manually terminated via the /live/search/terminate function.

get/accounts/csv

Query parameters

selectorstring required

Search term

bucketstring
limitinteger

Result limit

datefromstring
Example:2024-01-01 00:00:00

Date from of the result in YYYY-mm-dd HH:ii:ss format. (Not RFC3339)

datetostring
Example:2024-01-31 23:59:59

Date to of the result in YYYY-mm-dd HH:ii:ss format. (Not RFC3339)

terminatestring[]

Optional: ID of previous search to terminate to save system resources.

Response

Success with JSON LiveSearchResponse