POST
Intelligence Search
Dates take YYYY-MM-DD or DD/MM/YYYY. Open a record with UUID Search or Stealer Export, using its system_id.
name and the other fields come from leaked data. Treat them as untrusted text: never render them as HTML or follow their links automatically.

Authorizations

Authorization
string
header
required

Your API key, from https://orelys.io/account/api. It starts with orl_ (keys made before the rename start with fly_ and keep working). X-API-Key: <key> works too. A key in the URL is refused.

Body

application/json
query
string
required

An email address, a username, a domain or free text.

Required string length: 1 - 200
Example:

"john@example.com"

max_results
integer

How many records to return, 1 to 1000. A numeric string is accepted too.

Required range: 1 <= x <= 1000
Example:

50

media_type
string

Restrict the search to one media type. Leave it out for every type.

Maximum string length: 200
sort_order
enum<string>

Order of the records. Case does not matter.

Available options:
relevance,
date_asc,
date_desc
Example:

"relevance"

date_from
string

Earliest date, YYYY-MM-DD or DD/MM/YYYY.

Example:

"2020-01-01"

date_to
string

Latest date, YYYY-MM-DD or DD/MM/YYYY. Not before date_from.

Example:

"2024-12-31"

Response

The records found. charged tells whether the search took a request.

mode
enum<string>
required
Available options:
intelligent,
phonebook,
identity-portal,
uuid,
storage,
stealer-export
request
object
required

The search as sent to the archive, after normalisation: dates as DD/MM/YYYY, choices in lower case, numbers as strings.

count
integer
required

Number of items in results.

results
object[]
required
charged
boolean
required

Whether this search took 1 request from the daily quota. When the archive answers "no results", nothing is charged, within a daily allowance (your daily quota, at least 10); a search that completes with an empty list is charged, as in the dashboard.

quota
object
required

Today's quota. It resets every day at 02:00 Paris time.

redacted
integer

Only present when records were removed because they contain a removed selector.

source
object

Other fields the archive sent next to the list (a total, for example), passed through unchanged.