# Request Parameters

All parameters for the `/cookies` endpoint. Request method is HTTP `GET`. Each parameter may appear once, except the multi-valued ones noted below; an unknown parameter returns `400`.

## Required

| Parameter | Description |
| --- | --- |
| `token` | Your API token. Always required. |
| `domain` | The domain to check, e.g. `example.com`. Schemes, paths, and ports are stripped; `example.com` and `www.example.com` are different domains. Must be a valid registered domain. |

## Time window

Epoch milliseconds, UTC. No default window - omit both to cover all collected data.

| Parameter | Description |
| --- | --- |
| `crawled_from`, `crawled_to` | Filter by collection time. |
| `breach_from`, `breach_to` | Filter by exfiltration date. |

## Filters

| Parameter | Description |
| --- | --- |
| `cookie_type` | `auth`, `session`, `refresh`, `unclassified`. Multi-valued (OR). |
| `browser` | `chrome`, `edge`, `opera`, `firefox`, `safari`, `unknown`. Multi-valued (OR). |
| `service_host` | Exact host the cookie belongs to. Multi-valued (OR). |
| `expiration_status` | `active` or `expired`. |

See [Filters](leaked-cookies-filters) for details.

## Sorting & paging

| Parameter | Description |
| --- | --- |
| `sort_by` | `crawled` or `breached`. Default `crawled`. |
| `order_by` | `asc` (default) or `desc`. |
| `next` | Continuation cursor from the previous response - see [Pagination](leaked-cookies-pagination). |