Infostealer Detection

Your company’s own leak surface: reports, events, scans, inventory files and protected resources.

Access

Plan entitlementapi_access

Scopesleaks:readleak-events:readleak-events:writescans:readscans:writeinventory:readinventory:writeprotection-resources:readprotection-resources:writerequests:readwebhooks:readwebhooks:writesupply-chain:readsupply-chain:assess

Tasks

Track new leak eventsPull the events that arrived since your last check on a schedule and feed them into your own alerting or ticket queue.

Resolve an eventMark an event you handled in your own system in Dark Radar too; the panel and reports show the same state, and the action is written to the event’s history.

Manage your firm’s assets in bulkCreate resource groups, add up to 100 domains or applications in one request, and empty groups safely.

Assess supplier riskReview the third-party surface of employee accounts and grade new supplier domains from A to F.

Set up a webhook and verify signaturesReceive new leak and scan events at your own address instead of polling. Every delivery is signed; your receiver verifies the signature to know the body came from Dark Radar unchanged.

Leak reports

List leak reportsGET /v1/leaks

Get leak report detailsGET /v1/leaks/{reportId}

Get report credentialsGET /v1/leaks/{reportId}/credentials

Leak events

List leak eventsGET /v1/leak-events

Get leak event statisticsGET /v1/leak-events/statistics

Get leak event detailsGET /v1/leak-events/{eventId}

Get event occurrencesGET /v1/leak-events/{eventId}/occurrences

Get event action historyGET /v1/leak-events/{eventId}/history

Mark action on eventPOST /v1/leak-events/{eventId}/actions

Scans

List scansGET /v1/scans

Create a new scanPOST /v1/scans

Get scan detailsGET /v1/scans/{scanId}

Cancel a running scanPOST /v1/scans/{scanId}/cancel

Get scan findingsGET /v1/scans/{scanId}/findings

Inventory

List inventory itemsGET /v1/inventory

Unlock an inventory filePOST /v1/inventory/unlock

Get inventory item detailsGET /v1/inventory/{id}

Download inventory fileGET /v1/inventory/{id}/download

Get file tree structureGET /v1/inventory/{id}/tree

Get specific file content from archiveGET /v1/inventory/{id}/content

Case analyses

List CTI case analysesGET /v1/analyses

Get a CTI case analysisGET /v1/analyses/{id}

Protection resources

List protection resourcesGET /v1/protection-resources

List protection resource groupsGET /v1/protection-resources/groups

Create a protection resource groupPOST /v1/protection-resources/groups

Update a protection resource groupPUT /v1/protection-resources/groups/{id}

Delete an empty protection resource groupDELETE /v1/protection-resources/groups/{id}

Bulk create protection resourcesPOST /v1/protection-resources/bulk

Bulk delete protection resourcesDELETE /v1/protection-resources/bulk

Create protection resourcePOST /v1/protection-resources

List resources by typeGET /v1/protection-resources/type/{resourceType}

Get resource detailsGET /v1/protection-resources/{id}

Update protection resourcePUT /v1/protection-resources/{id}

Delete protection resourceDELETE /v1/protection-resources/{id}

Request history

List recent API requestsGET /v1/requests

Webhooks

List webhooksGET /v1/webhooks

Get a webhookGET /v1/webhooks/{groupId}

Set a webhookPUT /v1/webhooks/{groupId}

Delete a webhookDELETE /v1/webhooks/{groupId}

Send a test deliveryPOST /v1/webhooks/{groupId}/test

Rotate the signing secretPOST /v1/webhooks/{groupId}/rotate-secret

Delivery historyGET /v1/webhooks/{groupId}/deliveries

Supplier risk

List inbound supplier risksGET /v1/supply-chain/inbound

Assess supplier domainsPOST /v1/supply-chain/assess

Using MCP

corporate_list_reportsLists leak reports

corporate_get_reportGets one report

corporate_list_leak_eventsLists leak events with filters

corporate_get_leak_eventGets one leak event

corporate_list_inventoryLists inventory files

corporate_list_analysesLists CTI case analyses

corporate_get_analysisGets one case analysis with its context, evidence and report

corporate_list_protection_resourcesLists protection resources

corporate_list_protection_resource_groupsLists protection resource groups

corporate_create_protection_resource_groupCreates a protection resource group (changes data)

corporate_update_protection_resource_groupUpdates a protection resource group (changes data)

corporate_delete_protection_resource_groupDeletes an empty protection resource group (changes data)

corporate_bulk_create_protection_resourcesBulk creates protection resources (changes data)

corporate_bulk_delete_protection_resourcesBulk deletes protection resources (changes data)

corporate_list_webhook_deliveriesLists a webhook’s recent deliveries (read-only; 0.3.0+)

corporate_list_supply_chain_inboundLists inbound supplier risks (0.5.0+)

corporate_assess_suppliersGrades up to 50 suppliers from A to F (0.5.0+)