API reference
Access Dark Radar Intelligence data programmatically. Every request uses an API key; the key’s firm, scopes and the firm’s enabled products decide what it can see.
Base URL
https://api.darkradar.com/api/publicFirst request
To check your key works and which products are enabled:
curl -X GET "https://api.darkradar.com/api/public/v1/me" \ -H "x-api-key: $DARKRADAR_API_KEY"
Products and entitlements
An endpoint works only if the product is enabled for your firm and the key’s scope allows it. GET /v1/me tells you which products are enabled.
| Product | What it gives | Plan entitlement | Scopes |
|---|---|---|---|
| Infostealer Detection | Your company’s own leak surface: reports, events, scans, inventory files and protected resources. | api_access | leaks:read leak-events:read leak-events:write scans:read scans:write inventory:read inventory:write protection-resources:read protection-resources:write requests:read webhooks:read webhooks:write supply-chain:read supply-chain:assess |
| Intelligence 360 | On top of Infostealer Detection endpoints: customer leaks, Phishing & Brand Protection, vulnerabilities and IOC lookup. Customer events appear only with Intelligence 360 or the Customer scope. | intel_customer | leak-events:read |
| Portfolio Monitoring | One question for your watchlist: did it leak, and when. Add assets, read findings. | intel_watch | watch:read watch:write |
| Threat Investigation | Free-target search. Searching is free and results are masked; for cyber threat intelligence firms only, with a signed undertaking. | intel_hunter | hunter:search hunter:password hunter:read hunter:write leaks:read |
Response envelope
Successful responses carry success, message and data; lists come inside data with pagination info.
{
"success": true,
"data": {
"firm": "64b1f0c2a9e4d21f8c3b9001",
"apiKeyId": "64b1f0c2a9e4d21f8c3b9002",
"scopes": [
"örnek"
],
"accessType": "all",
"products": {
"corporate": true,
"x360": false,
"watch": true,
"hunter": false
}
}
}