API documentation

API reference

Access Dark Radar Intelligence data programmatically. Every request uses an API key; the key’s firm, scopes and the firm’s enabled products decide what it can see.

Base URLhttps://api.darkradar.com/api/public

First request

To check your key works and which products are enabled:

curl -X GET "https://api.darkradar.com/api/public/v1/me" \
  -H "x-api-key: $DARKRADAR_API_KEY"

Products and entitlements

An endpoint works only if the product is enabled for your firm and the key’s scope allows it. GET /v1/me tells you which products are enabled.

ProductWhat it givesPlan entitlementScopes
Infostealer DetectionYour company’s own leak surface: reports, events, scans, inventory files and protected resources.api_accessleaks:read leak-events:read leak-events:write scans:read scans:write inventory:read inventory:write protection-resources:read protection-resources:write requests:read webhooks:read webhooks:write supply-chain:read supply-chain:assess
Intelligence 360On top of Infostealer Detection endpoints: customer leaks, Phishing & Brand Protection, vulnerabilities and IOC lookup. Customer events appear only with Intelligence 360 or the Customer scope.intel_customerleak-events:read
Portfolio MonitoringOne question for your watchlist: did it leak, and when. Add assets, read findings.intel_watchwatch:read watch:write
Threat InvestigationFree-target search. Searching is free and results are masked; for cyber threat intelligence firms only, with a signed undertaking.intel_hunterhunter:search hunter:password hunter:read hunter:write leaks:read

Response envelope

Successful responses carry success, message and data; lists come inside data with pagination info.

{
  "success": true,
  "data": {
    "firm": "64b1f0c2a9e4d21f8c3b9001",
    "apiKeyId": "64b1f0c2a9e4d21f8c3b9002",
    "scopes": [
      "örnek"
    ],
    "accessType": "all",
    "products": {
      "corporate": true,
      "x360": false,
      "watch": true,
      "hunter": false
    }
  }
}

Was this page helpful?