The Orelys API gives your scripts and tools the same six search modes as your dashboard on orelys.io: Intelligence Search, Phonebook, Identity Portal, and raw files by System ID, by Storage ID, or as a stealer-log archive. It runs on your Orelys account. A search through the API takes a request from the same daily quota as a search in the dashboard, and follows the same rules.
API access comes with the Professional and Enterprise plans. Compare plans.

​
Start here

Quickstart

Get a key and run your first search in two minutes.

Authentication

Get, send and regenerate your API key.

Limits & quotas

Daily quota, per-minute limits, and the headers that report them.

API reference

Every route, with a playground to try it.

​
The six search modes

How the modes fit together →

​
The OSINT modules

Paid in credits rather than from the daily quota, they look one identifier up across many sources at once — about 200 for a username, about 50 for an email address. How the OSINT modules work →

​
Conventions

  • Base URL: https://api.orelys.io/v1, over HTTPS only.
  • Format: requests and responses are JSON in UTF-8, except the raw files (text/plain) and the archives (application/zip).
  • Times are ISO 8601, in UTC.
  • Every response carries an X-Request-Id header. Give it to support when you report a problem.
  • Versioning: the version is in the path (/v1). Build your code to ignore fields it does not know: new ones can appear.
Use Orelys only for lawful purposes, on data you are entitled to investigate. The Terms and the Acceptable Use Policy apply to the API as they do to the rest of Orelys.