How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Need help?

Contact us
SpyCloud

SpyCloud Breach API

The Breach API from SpyCloud — 23 operation(s) for breach.

Documentation Provider Profile APIs.io OpenAPI GitHub

SpyCloud Breach API is one of 7 APIs that SpyCloud publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Breach. The published artifact set on APIs.io includes an OpenAPI specification.

This API exposes 23 operations across 23 paths. It is described by OpenAPI 3.2.0, at version 1.1.

Requests are made against 4 base URLs: https://api.spycloud.io/sp-v2, https://api.spycloud.io/enterprise-v2, https://api.spycloud.io/investigations-v2, https://api.spycloud.io/sip-v1.

23 operations 23 paths 0 schemas 23 GET

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
1.1
Base URL
https://api.spycloud.io/enterprise-v2
Authentication
API Key
Resource Areas
1

Authentication & Security 1

SpyCloud Breach API declares 1 security scheme for authenticating requests. An API key is passed in the header as x-api-key (sec0). By default, every request must be authenticated.

Paths & Operations 23

Across 23 paths, the API surfaces 23 operations — 23 GET. Each is listed below with its method, path, parameters, and response codes.

Breach 23
GET
/breach/data/emails/{email}
Get records by email address
cap-get-records-by-email-address 6 params → 200400
GET
/breach/data/ips/{ip}
Get records by IP address
cap-get-records-by-ip-address 8 params → 200400
GET
/breach/data/usernames/{username}
Get records by usernames
get-records-by-usernames 6 params → 200400
GET
/breach/catalog/
List all breach metadata
cap-list-all-breach-metadata 4 params → 200400
GET
/breach/catalog/{id}
Get metadata for a breach
get-metadata-for-a-breach 1 param → 200400
GET
/breach/data/phone-numbers/{phone_number}
Get records by phone number
cap-get-records-by-phone-number 6 params → 200400
GET
/breach/data/domains/{domain}
Get records by domain
dp-get-records-by-domain 10 params → 200400
GET
/breach/data/health-insurance-ids/{health_insurance_id}
Get records by Health Insurance ID
dp-get-records-by-health-insurance-id 6 params → 200400
GET
/breach/data/bank-numbers/{bank_number}
Get records by bank number
dp-get-records-by-bank-number 7 params → 200400
GET
/breach/data/cc-numbers/{cc_number}
Get records by credit card number
dp-get-records-by-credit-card-number 6 params → 200400
GET
/breach/data/drivers-licenses/{drivers_license}
Get records by drivers license
dp-get-records-by-drivers-license 7 params → 200400
GET
/breach/data/national-ids/{national_id}
Get records by National ID
get-records-by-national-id 7 params → 200400
GET
/breach/data/passport-numbers/{passport_number}
Get records by passport number
dp-get-records-by-passport-number 7 params → 200400
GET
//breach/data/passwords/{password}
get_breachdatapasswords{password} 9 params → 200
GET
/breach/data/social-security-numbers/{social_security_number}
Get records by Social Security Number
get-records-by-social-security-number 7 params → 200400
GET
/breach/data/passwords/{password}
Get records by password
eap-get-records-by-password 9 params → 200400429500504
GET
/breach/data/watchlist
Get all records in watchlist
eap-get-all-records-in-watchlist 10 params → 200201204400403429500504
GET
/breach/catalog
List all breach metadata
eap-list-all-breach-metadata 4 params → 200400403429500504
GET
/breach/data/infected-machine-ids/{infected_machine_id}
Get records by Infected Machine ID
inv-get-records-by-infected-machine-id 9 params → 200400
GET
/breach/data/log-ids/{log_id}
Get records by Log ID
inv-get-records-by-log-id 9 params → 200400
GET
/breach/data/email-usernames/{email_username}
Get records by email username
inv-get-records-by-email-username 10 params → 200400
GET
/breach/data/social-handles/{social_handle}
Get records by social handle
inv-get-records-by-social-handle 10 params → 200400
GET
/breach/data/cookie-domains/{cookie_domain}
Get cookies for domain
sip-get-cookies-for-domain 9 params → 200400

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

spycloud-breach-api-openapi.yml Raw ↑

Other APIs SpyCloud publishes across the network.

SpyCloud Check API
AE Profile APIs.io
SpyCloud Compass API
AE Profile APIs.io
SpyCloud Data API
AE Profile APIs.io
SpyCloud Query API
AE Profile APIs.io
SpyCloud Stats API
AE Profile APIs.io
SpyCloud Watchlist API
AE Profile APIs.io
#Breach
← Back to S APIs
API Details
ID
spycloud:spycloud-breach-api
Base URL
https://api.spycloud.io/enterprise-v2
Docs
https://docs.spycloud.com/public-sc/reference/enterprise-ato-api-guidelines
Provider
SpyCloud
APIs.io →  GitHub →
Explore more
All APIs Providers APIs.io Network
Work with this as data

Every API here is available over the API and to AI agents over MCP. APIs is not yet its own endpoint on the v1 API. Reach this content through network search and the tag graph, or the MCP server below.

Installs https://mcp.apievangelist.com/mcp in Claude, Cursor, VS Code and the rest — one button, every client.

MCP tools for apis
4 tools reach this content
  • search_api_evangelistSearch every content type across the network at once.
  • find_relatedThe shared-tag relevance graph — what else covers this.
  • get_tagEverything one tag labels, across all content types.
  • guide_topicPRO — a curated bundle for a topic: area, guidance, rules, papers, stories, services.
All tools & prompts
Call it yourself
curl for this page
Search the network for this 
curl "https://api.apievangelist.com/v1/search?q=spycloud-breach-api&limit=10"
Everything under a tag 
curl "https://api.apievangelist.com/v1/tags/spycloud-breach-api"

Discovery needs no key. Full bodies and the synthesis endpoints are Pro.

Get an API key

Free tier, no email required. Sign in with whichever identity you already have.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have. Your account

Where this information came from

This is an independent, third-party profile of SpyCloud Breach API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.