Your privacy, your choice

Choose whether to enable audience analytics, LeakRadar and LinkedIn / X campaign measurement, LinkedIn / X personalized advertising and support chat. Google Ads conversion tracking runs independently of these preferences.

Cookies and providers
LEAKRADAR / Cookies

Necessary

Sign-in, requested preferences, checkout and protection against automated abuse. These functions do not depend on optional tracking.

LeakRadar · Cloudflare · Google reCAPTCHA · Stripe
Always active

We remember acceptance and refusal for six months. You can change either choice here at any time. Changing enabled services may reload the page to stop their scripts.

Cookies and providers
Version 2026-09-20.1
Skip to content
REST API

LeakRadar API

Search stealer logs, combolists, raw leak files and dark web posts from your own tools, unlock and export the credentials you need, and receive monitoring alerts on your webhook.

API keys come with every paid plan. Searching is free; unlocking a record costs 1 point.

What you can do with the API

Search every dataset

Email, username, domain and advanced filters in stealer logs, email:password pairs in combolists, full text in raw leak files, dark web posts, Android apps and password hashes.

See the documentation

Unlock and export

Unlock the records you need with your points, one by one or in bulk in the background, then export them as CSV, TXT or JSON files.

See the documentation

Monitor and get alerts

Watch an address, a domain, search filters, raw files or dark web terms, and receive each new result by email, Slack, Discord, Telegram or webhook.

See the documentation

Usage and team

Follow your points, quotas and rate limits, review the history of your balance and tasks, and manage your team.

See the documentation

Your first request

Send your API key in the Authorization header. The answer lists the matching records, masked until you unlock them.

curl
curl -X POST https://api.leakradar.io/search/email \
  -H "Authorization: Bearer $LEAKRADAR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"email": "john.doe@example.com"}'
Python (pip install leakradar)
import asyncio

from leakradar import LeakRadarClient

async def main():
    async with LeakRadarClient(token='YOUR_API_KEY') as client:
        results = await client.search_email('john.doe@example.com')
        print(results['total'], results['total_unlocked'])

asyncio.run(main())

Limits by plan

Limits apply per account and per API key, never per IP address. These figures come straight from the current plans.

PlanSearches per 24 hoursAdvanced and raw searches at once
Starter10,0001
Enterprise50,0002
Platinum200,0003
UnlimitedNo limit8

Requests per second, refusals and how to retry: See the documentation

Integrations

Alerts on your webhook

Each monitoring alert arrives as a JSON POST, with your own headers to authenticate it, ready for your SIEM or SOAR pipeline.

Webhook payloads

Python SDK

The official asynchronous Python client: pip install leakradar.

Source on GitHub

AI assistants (MCP)

Connect Claude, ChatGPT, Codex, Cursor or VS Code to LeakRadar with OAuth, without copying an API key.

Set up the MCP connector

Questions about the API

Every paid plan: Starter, Enterprise, Platinum and Unlimited. The datasets, quotas and points you get through the API are those of your plan.

Commercial use depends on your plan and the Terms of Service. The pricing page shows which plans allow it.

Searching is free. Credentials stay masked until you unlock them, at 1 point per new record. On Unlimited, every record is readable without unlocking.

You receive HTTP 429 with a Retry-After header: wait that long before retrying, never in a loop. GET /rate-limits shows your limits and recent refusals.