API Documentation

Overview

The Dohrnii API allows you to programmatically check email addresses against our aggregated breach database. All endpoints return JSON responses and support CORS for browser-based applications.

Rate Limits

To ensure fair usage, the API implements the following rate limits:

Rate limit information is included in response headers: X-RateLimit-Remaining

Search Email

Check if an email address has been found in known data breaches.

Request Body

{
  "email": "user@example.com",
  "preview": false
}

Response

{
  "success": true,
  "data": {
    "breaches": [
      {
        "breachName": "ExampleBreach",
        "breachDate": "2023-01-15",
        "dataTypes": ["email", "password"],
        "recordsCount": 1000000,
        "riskLevel": "high"
      }
    ],
    "analytics": {
      "riskScore": 7,
      "riskLabel": "High",
      "totalBreaches": 3,
      "passwordsExposed": true
    }
  }
}

Quick Preview

A simpler endpoint that returns a quick preview with breach count and risk level.

Response

{
  "success": true,
  "preview": true,
  "data": {
    "breachCount": 3,
    "riskLevel": "medium"
  }
}

Error Responses

All errors follow a consistent format:

{
  "success": false,
  "error": "Error message describing the issue"
}

HTTP Status Codes

Code Examples

JavaScript (Fetch)

const response = await fetch('https://dohrnii.org/api/search', {
  method: 'POST',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({ email: 'user@example.com' })
});

const data = await response.json();
console.log(data.data.analytics.riskScore);

Python (Requests)

import requests

response = requests.post(
    'https://dohrnii.org/api/search',
    json={'email': 'user@example.com'}
)

data = response.json()
print(f"Risk Score: {data['data']['analytics']['riskScore']}")

cURL

curl -X POST https://dohrnii.org/api/search \
  -H "Content-Type: application/json" \
  -d '{"email": "user@example.com"}'

Data Sources

Dohrnii aggregates breach data from multiple reputable security research sources:

• XposedOrNot - Comprehensive breach analytics
• LeakCheck - Public breach database
• Have I Been Pwned - Password exposure via k-anonymity
• Ahmia.fi - Security research index