API URL
POST /api/v1/breach-check/check (GET single, POST batch)
Headers
Code
Content-Type: application/jsonBody Parameters
Param
Type
Description
email
optional
string
Email address to check against breach databases
emails
optional
array
Array of 1 to 25 valid email strings for batch checking
hash_prefix
optional
string
First 5 hexadecimal characters of a SHA-1 password hash
password
optional
string
Plaintext password to evaluate via in-memory hashing
domain
optional
string
Domain name to filter historical public breaches catalog
Example Request
Code
GET https://datpaq.com/api/v1/breach-check/check?email=user@example.com&api_key=your-api-keySuccessful Response
Status
HTML
200 OKBody
Code
{
"success": true,
"email": "user@example.com",
"breached": true,
"breachCount": 1,
"breaches": [
{
"name": "Adobe",
"title": "Adobe",
"domain": "adobe.com",
"breachDate": "2013-10-04",
"pwnCount": 152445165,
"dataClasses": [
"Email addresses",
"Passwords"
],
"isVerified": true,
"isSensitive": false
}
],
"metadata": {
"correlationId": "req_abc123",
"timestamp": "2026-10-12T12:00:00.000Z",
"processingTime": "18ms",
"api_token_name": null,
"rate_limit": {
"limit": null,
"remaining": null,
"reset": null
}
}
}Field
Type
success
boolean
email
string
breached
boolean
breachCount
number
breaches
array
pwned
boolean
count
number
hashPrefix
string
totalMatchingSuffixes
number
matches
array
results
array
summary
object
offline
boolean
reason
string
message
string
metadata
object
metadata_correlationId
string
metadata_timestamp
string
metadata_processingTime
string
metadata_api_token_name
string
metadata_rate_limit
object
status
string
service
string
version
string
hibpConfigured
boolean
offlineTests
boolean
error
string
details
array
Error Response
Example
Code
HTTP 400 ValidationError: Invalid email format invalid 5-character hash prefix or batch exceeding 25 items — Request rejected by input validation; HTTP 401 AuthenticationError: Gateway authentication failure — Missing or invalid API key; HTTP 404 NotFound: Unknown endpoint path — Request did not match a defined route; HTTP 429 RateLimitError: Route limiter email lookup budget or HIBP upstream rate limit exceeded — Too many requests in active window; HTTP 502 UpstreamAuthError: HIBP rejected the configured API key or network failure — Upstream provider error; HTTP 503 ConfigurationError: HIBP_API_KEY missing for live email lookup while OFFLINE_TESTS is disabled — Configuration required; HTTP 500 InternalError: Unexpected lookup failure — Internal server errorLast Updated: May 4, 2026