One endpoint. One auth header.

Every lookup, whether it's an email, a phone number, or a username, goes through the same endpoint, the same auth, and comes back in the same shape. No per-platform quirks leak into the contract.

Quickstart

Create a key in the dashboard, then send a query. New accounts get 15 free lookups, no card required.

POST /v1/lookup?wait=true

curl -X POST "https://api.digifootprint.dev/v1/lookup?wait=true" \
  -H "Authorization: Bearer dfp_your_key" \
  -H "Content-Type: application/json" \
  -d '{"query": "someone@example.com"}'

What you get back

A per-platform verdict, plus breach history and public web mentions for email queries. The most important thing to understand about the response is what it does not contain: a platform we could not get a confident answer for is left out entirely, rather than reported as “not registered”. See running a lookup.

Machine-readable spec

The OpenAPI spec and a ready-to-run Postman collection are both generated from the API itself, so they never drift from what the server actually does. You can also browse the API in Swagger UI and send a request without leaving the page.