Check if a password has been exposed in known breaches. Future updates will add full email/username/domain scan support.

• Get Started on RapidAPI
• API Docs on Dakidarts

Authentication

All requests require your RapidAPI key in headers:

"x-rapidapi-key": "YOUR_RAPIDAPI_KEY"
"x-rapidapi-host": "dark-web-exposure-api.p.rapidapi.com"

Endpoints

1. Check Password Exposure

POST /password

Check if a password has appeared in known breaches (using pwnedpasswords).

Request Body

{
  "password": "mypassword123"
}

Successful Response

{
  "ok": true,
  "breach_count": 1523
}

• breach_count → Number of times this password appeared in known breaches.
• A count of 0 means the password hasn’t been exposed.

Error Response

{
  "error": {
    "code": "missing_password",
    "message": "Provide a password."
  }
}

Roadmap (Upcoming)

• /scan endpoint for email / username / domain breach checks.