# Endpoints & Authentication

The Data Breaches API has two `GET` endpoints. Both authenticate with your API `token` as a query parameter.

## Search

`GET`

```bash
https://api.webz.io/breaches?token=YOUR_TOKEN&email_domain=example.com
```

Returns compromised records matching your [Search Scope](data-breach-scope) and [Filters](data-breach-filters). This is the main endpoint.

## Breach Catalog

`GET`

```bash
https://api.webz.io/breachCatalog?token=YOUR_TOKEN&query=linkedin
```

Looks up known breaches by name and returns their UUIDs, so you can then search a single breach with `breach_uuid`. See [Breach Catalog](data-breach-catalog).

## Authentication

- The `token` parameter is required on every request. A missing or unknown token returns `401`.
- Your account needs the Data Breaches permission and authorization for the domains you search. Otherwise requests return `401` or `403`.

> [!NOTE]
> Need access or more domains? Contact **sales@webz.io**.