Skip to main content

​
Authentication

Go to your Dashboard > Account to view your API key.
The most common cause is using the wrong header name. The header must be lowercase: x-api-key
# Correct
curl -H "x-api-key: YOUR_KEY" ...

# Wrong - will fail
curl -H "X-API-Key: YOUR_KEY" ...
curl -H "Authorization: Bearer YOUR_KEY" ...
Contact us immediately at support@oathnet.org.

​
Search Sessions

A search session allows you to perform multiple searches for the same query while only consuming one lookup from your quota. See Search Sessions Guide for details.
Sessions are valid for 60 minutes from creation.
Your daily quota resets 24 hours after your first lookup of the day.
  • Without search session: Each API call counts as 1 lookup
  • With search session: Multiple calls for the same query use 1 lookup
  • Failed requests do NOT count against quota

​
Stealer Logs

Stealer logs are data captured by information-stealing malware from infected computers. They typically contain saved passwords, cookies, Discord tokens, and other sensitive data from the infected device.
Credentials in stealer logs are stored as plain text lines with URL, username, and password separated by delimiters like |, :, or ;:
https://facebook.com|user@email.com|password123
A log_id is a unique identifier for a victim’s stealer log. Use it with the Victims Manifest endpoint to get full device information and files.
Some results are credential-only records parsed from stealer logs without full victim profile context. These will have a LOG field with the raw credential data instead.

​
Smart Query Detection

The q parameter automatically detects your query type:
QueryDetected As
user@example.comEmail
example.comDomain
192.168.1.1IP address
123456789012345678Discord ID
johndoeUsername

​
Technical

All endpoints return JSON with a standard envelope:
{
  "success": true,
  "message": "Description",
  "data": { ... },
  "lookups_left": 999
}
Technically yes, but not recommended. API keys should never be exposed in client-side code. Use a backend proxy instead.

​
Contact

For additional questions, contact us at support@oathnet.org or join our Discord.