List findings

Leaks found for your watched targets, newest first. Secrets are masked; unmasked content is available only in the dashboard, with a declaration. Subscribe to the `hunter.finding.created` event to be notified of new findings.

GET/v1/hunter/findings

GETList findings

curl -X GET "https://api.darkradar.com/api/public/v1/hunter/findings" \
  -H "x-api-key: $DARKRADAR_API_KEY"

Response

Success

{
  "success": true,
  "data": {
    "items": [
      {
        "id": "64b1f0c2a9e4d21f8c3b9a70",
        "targetId": "64b1f0c2a9e4d21f8c3b9a60",
        "source": "darkradar",
        "breachName": null,
        "exposedFields": [
          "username",
          "password"
        ],
        "secretMasked": "Ya******23",
        "severity": "high",
        "seenAt": "2026-10-31T00:00:00.000Z",
        "createdAt": "2026-11-01T03:00:00.000Z"
      }
    ],
    "total": 1,
    "page": 1,
    "pageSize": 50
  }
}

Access

Scopehunter:read

Plan entitlementintel_hunter

Query parameters

Fields	Values
`targetId` · string · optional	Only this target · Example: `64b1f0c2a9e4d21f8c3b9a60`
`page` · integer · optional	Page (from 1) · Example: `1`
`pageSize` · integer · optional	Page size (1–200) · Example: `50`

Responses

200Success

400Invalid request (malformed id, missing or invalid field)

401Key missing, invalid, expired or revoked

403Insufficient scope, no API access in plan, or product not enabled

404Record not found or not owned by this key’s firm

408The request exceeded its maximum response time

429Rate limit exceeded; retry after a minute

Threat Investigation findingResponse model

Response limits

Page sizepageSize · default 50 · max 200

Rate limit500 requests per 15 min · per IP

Threat Investigation20 requests per 1 min · per firm