Skip to main content

Authentication

All requests require the x-api-key header:
curl -H "x-api-key: YOUR_API_KEY" https://oathnet.org/api/...

Search Session

Initialize Session

curl -X POST "https://oathnet.org/api/service/search/init" \
  -H "x-api-key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"query": "user@example.com"}'
curl -X GET "https://oathnet.org/api/service/search-breach?q=user@example.com" \
  -H "x-api-key: YOUR_API_KEY"

With Filters

curl -X GET "https://oathnet.org/api/service/search-breach?q=user@example.com&dbnames=linkedin_2012,adobe_2013" \
  -H "x-api-key: YOUR_API_KEY"

With Pagination

curl -X GET "https://oathnet.org/api/service/search-breach?q=user@example.com&cursor=YOUR_CURSOR" \
  -H "x-api-key: YOUR_API_KEY"

Basic Search

curl -X GET "https://oathnet.org/api/service/v2/stealer/search?q=user@example.com" \
  -H "x-api-key: YOUR_API_KEY"

With Filters

curl -X GET "https://oathnet.org/api/service/v2/stealer/search?q=user@example.com&domain[]=google.com&domain[]=facebook.com&has_log_id=true&from=2024-01-01&page_size=50" \
  -H "x-api-key: YOUR_API_KEY"

Extract Subdomains

curl -X GET "https://oathnet.org/api/service/v2/stealer/subdomain?domain=example.com" \
  -H "x-api-key: YOUR_API_KEY"

V2 Victims

Search Victims

curl -X GET "https://oathnet.org/api/service/v2/victims/search?q=user@example.com&total_docs_min=10" \
  -H "x-api-key: YOUR_API_KEY"

Get Manifest

curl -X GET "https://oathnet.org/api/service/v2/victims/vic_xxx_user_yyy" \
  -H "x-api-key: YOUR_API_KEY"

Get File Content

curl -X GET "https://oathnet.org/api/service/v2/victims/vic_xxx/files/file_id" \
  -H "x-api-key: YOUR_API_KEY"

Download Archive

curl -X GET "https://oathnet.org/api/service/v2/victims/vic_xxx/archive" \
  -H "x-api-key: YOUR_API_KEY" \
  -o victim_archive.zip

Create Job

curl -X POST "https://oathnet.org/api/service/v2/file-search" \
  -H "x-api-key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "expression": "api[_-]?key",
    "search_mode": "regex",
    "log_ids": ["vic_xxx"],
    "include_matches": true,
    "context_lines": 2,
    "max_matches": 100
  }'

Get Job Status

curl -X GET "https://oathnet.org/api/service/v2/file-search/JOB_ID" \
  -H "x-api-key: YOUR_API_KEY"

V2 Export

Create Export Job

curl -X POST "https://oathnet.org/api/service/v2/exports" \
  -H "x-api-key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "type": "docs",
    "format": "csv",
    "limit": 10000,
    "search": {
      "domains": ["banking.com"],
      "from_date": "2024-01-01"
    }
  }'

Get Export Status

curl -X GET "https://oathnet.org/api/service/v2/exports/JOB_ID" \
  -H "x-api-key: YOUR_API_KEY"

Download Export

curl -X GET "https://oathnet.org/api/service/v2/exports/JOB_ID/download" \
  -H "x-api-key: YOUR_API_KEY" \
  -o export.csv

OSINT Lookups

IP Info

curl -X GET "https://oathnet.org/api/service/ip-info?ip=8.8.8.8" \
  -H "x-api-key: YOUR_API_KEY"

Steam

curl -X GET "https://oathnet.org/api/service/steam?steam_id=76561198012345678" \
  -H "x-api-key: YOUR_API_KEY"

Xbox

curl -X GET "https://oathnet.org/api/service/xbox?xbl_id=GamerTag123" \
  -H "x-api-key: YOUR_API_KEY"

Discord User Info

curl -X GET "https://oathnet.org/api/service/discord-userinfo?discord_id=123456789012345678" \
  -H "x-api-key: YOUR_API_KEY"

Discord Username History

curl -X GET "https://oathnet.org/api/service/discord-username-history?discord_id=123456789012345678" \
  -H "x-api-key: YOUR_API_KEY"

Discord to Roblox

curl -X GET "https://oathnet.org/api/service/discord-to-roblox?discord_id=123456789012345678" \
  -H "x-api-key: YOUR_API_KEY"

Roblox User Info

# By user ID
curl -X GET "https://oathnet.org/api/service/roblox-userinfo?user_id=123456789" \
  -H "x-api-key: YOUR_API_KEY"

# By username
curl -X GET "https://oathnet.org/api/service/roblox-userinfo?username=Builderman" \
  -H "x-api-key: YOUR_API_KEY"

Holehe

curl -X GET "https://oathnet.org/api/service/holehe?email=user@example.com" \
  -H "x-api-key: YOUR_API_KEY"

GHunt

curl -X GET "https://oathnet.org/api/service/ghunt?email=user@gmail.com" \
  -H "x-api-key: YOUR_API_KEY"

Extract Subdomains

curl -X GET "https://oathnet.org/api/service/extract-subdomain?domain=example.com&is_alive=true" \
  -H "x-api-key: YOUR_API_KEY"

Utility

Database Autocomplete

curl -X GET "https://oathnet.org/api/service/dbname-autocomplete?q=link" \
  -H "x-api-key: YOUR_API_KEY"

Tips

Pretty Print JSON

curl ... | jq .

Save to File

curl ... -o output.json

Verbose Output

curl -v ...

With Variables

API_KEY="your_api_key"
QUERY="user@example.com"

curl -X GET "https://oathnet.org/api/service/search-breach?q=${QUERY}" \
  -H "x-api-key: ${API_KEY}"