Leak Database API

curl -X POST https://www.leakdatabase.com/api/v1/email \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"email": "jane@example.com"}'

curl -X POST https://www.leakdatabase.com/api/v1/email -H "Authorization: Bearer YOUR_API_KEY" -H "Content-Type: application/json" -d "{\"email\": \"jane@example.com\"}"

Invoke-RestMethod -Method Post -Uri "https://www.leakdatabase.com/api/v1/email" `
  -Headers @{ Authorization = "Bearer YOUR_API_KEY" } `
  -ContentType "application/json" `
  -Body (@{ email = "jane@example.com" } | ConvertTo-Json)

Authorization: Bearer ldk_3f9a…

{
  "email": "jane@example.com"
}

{
  "email": "jane@example.com",
  "found": true,
  "breach_count": 2,
  "undocumented_breaches": 0,
  "breaches": [
    {
      "id": 1,
      "name": "ExampleShop Online",
      "date": "2025-03-14",
      "date_label": "14 Mar 2025",
      "records": 1250000,
      "data_exposed": ["Email addresses", "Phone numbers", "Physical addresses"],
      "description": "In March 2025, attackers gained access to …",
      "advice": "Change your ExampleShop password and any account where you reused it."
    },
    {
      "id": 2,
      "name": "SampleForum",
      "date": "2024-11",
      "date_label": "November 2024",
      "records": 483210,
      "data_exposed": ["Email addresses", "Usernames", "Password hashes"],
      "description": "…",
      "advice": "…"
    }
  ],
  "checked_at": "2026-10-30T20:51:00+00:00"
}

{
  "page": 1,
  "per_page": 100,
  "total": 17,
  "pages": 1,
  "breaches": [
    { "id": 17, "name": "NewCo Rewards", "date": "2026-10-20", "date_label": "20 Oct 2026",
      "records": 2100000, "data_exposed": ["Email addresses", "Phone numbers", "Passwords"] }
  ]
}

{
  "packages": [3],
  "today": {
    "searches_and_api_calls": {
      "limit": 500, "used": 49, "remaining": 451,
      "api_calls": 42, "website_searches": 7
    },
    "pdf_reports": { "limit": 500, "used": 1, "remaining": 499 }
  },
  "monitoring": { "email_addresses": 5, "domains": 5 },
  "resets_at": "2026-10-31T00:00:00+02:00"
}

X-RateLimit-Limit: 500        # searches + API calls per day in your package
X-RateLimit-Remaining: 451    # left today (website and API together)
X-RateLimit-Reset: 11340      # seconds until midnight (UTC+2)

{
  "error": {
    "code": "invalid_api_key",
    "message": "This API key is not valid or has been revoked.",
    "status": 401
  }
}

<?php
$apiKey = getenv('LEAKDATABASE_API_KEY');   // keep the key out of your code

$ch = curl_init('https://www.leakdatabase.com/api/v1/email');
curl_setopt_array($ch, [
    CURLOPT_POST           => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT        => 15,
    CURLOPT_HTTPHEADER     => [
        'Authorization: Bearer ' . $apiKey,
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS     => json_encode(['email' => 'jane@example.com']),
]);
$body   = curl_exec($ch);
$status = curl_getinfo($ch, CURLINFO_RESPONSE_CODE);
curl_close($ch);

$data = json_decode($body, true);
if ($status === 200) {
    echo $data['found'] ? "Found in {$data['breach_count']} breaches\n" : "Not found\n";
} else {
    echo "Error {$status}: {$data['error']['message']}\n";
}

import os, requests

resp = requests.post(
    "https://www.leakdatabase.com/api/v1/email",
    headers={"Authorization": f"Bearer {os.environ['LEAKDATABASE_API_KEY']}"},
    json={"email": "jane@example.com"},
    timeout=15,
)
if resp.status_code == 429:
    print("Limit reached, retry after", resp.headers.get("Retry-After"), "seconds")
resp.raise_for_status()
data = resp.json()
for b in data["breaches"]:
    print(b["name"], b["date_label"], ", ".join(b["data_exposed"]))

const res = await fetch("https://www.leakdatabase.com/api/v1/email", {
  method: "POST",
  headers: {
    "Authorization": `Bearer ${process.env.LEAKDATABASE_API_KEY}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({ email: "jane@example.com" }),
});
const data = await res.json();
if (!res.ok) throw new Error(data.error.message);
console.log(data.found ? `Found in ${data.breach_count} breaches` : "Not found");
console.log("Calls left today:", res.headers.get("X-RateLimit-Remaining"));

using System.Net.Http.Json;

var http = new HttpClient();
http.DefaultRequestHeaders.Authorization =
    new("Bearer", Environment.GetEnvironmentVariable("LEAKDATABASE_API_KEY"));

var res = await http.PostAsJsonAsync("https://www.leakdatabase.com/api/v1/email", new { email = "jane@example.com" });
var json = await res.Content.ReadAsStringAsync();
Console.WriteLine($"{(int)res.StatusCode}: {json}");