All endpoints return JSON unless noted and are rate limited per IP address.
GET /api/v1/breaches
List all public breaches (optional ?domain= filter).
GET /api/v1/breach/{name}
Get a single breach by name.
GET /api/v1/latestbreach
Get the most recently added breach.
GET /api/v1/dataclasses
List every data class in the system.
POST /api/v1/breachedaccount
Look up an account. Send the email or phone in the POST body as “account” — never in the URL. Returns 404 when not pwned.
GET /api/v1/range/{first5HashChars}
Pwned Passwords k-anonymity range search: send the first 5 characters of a SHA-1 hash, receive matching suffixes and counts.
curl -X POST https://pwnedtool.click/api/v1/breachedaccount -d "[email protected]"
curl https://pwnedtool.click/api/v1/range/21BD1