The Data Breaches API has four GET endpoints. All authenticate with your API token.
GET
https://api.webz.io/breaches?token=YOUR_TOKEN&email_domain=example.com
Returns compromised records matching your Search Scope and Filters. This is the main endpoint.
GET
https://api.webz.io/breaches/ask?q=YOUR_QUESTION
Describe the search in plain English; it runs as a standard /breaches query and returns the same response. See Natural Language Search.
GET
https://api.webz.io/breaches/getEmail?token=YOUR_TOKEN&email=[email protected]
Returns every record for one email address across the full history. Requires the email-search permission. See Search by Email.
GET
https://api.webz.io/breachCatalog?token=YOUR_TOKEN&query=linkedin
Looks up known breaches by name and returns their UUIDs, so you can then search a single breach with breach_uuid. See Breach Catalog.
token as a query parameter, or as an Authorization: Bearer YOUR_TOKEN header. A missing token returns 401; an unknown token returns 404.401 or 403.Need access or more domains? Contact [email protected].