Skip to main content
POST

Authorizations

Authorization
string
header
required

Authorization: Bearer fly_live_…. Takes precedence when both headers are sent.

Body

application/json

Free-text query, advanced fields, or both — at least one is required. query searches every identity field at once; fields ANDs named fields to narrow to one person. IBAN and SIRET are never a search target.

query
string

Anything that names a person — email, full name, username, phone. Trimmed; 3–256 characters.

Required string length: 3 - 256
Example:

"jane.doe@example.com"

fields
object

Advanced search: each entry is a separate, required constraint (ANDed). 2–256 characters each, at most 10 fields. An unknown or sensitive key returns 422.

Example:

Response

200 - application/json

Search served (billed from the breach bucket), including a successful empty result.

module
enum<string>
required
Available options:
breach-search
query
string
required

The search as run: the free value, or the advanced fields joined.

total
integer
required

Records found. Capped at 10,000 — see total_is_lower_bound.

returned
integer
required
truncated
boolean
required

true when total is greater than returned. There is no next page.

sources
object
required

Map of breach_id to the breach it names.

results
object[]
required
billed
boolean
required
usage
object
required

Quota of the account, after the call.

total_is_lower_bound
boolean

true when the index stopped counting at 10,000.

partial
boolean

true when the index ran out of time; an empty partial result is refunded.