{
  "opencollection": "1.0.0",
  "info": {
    "name": "Have I Been Pwned API v3 Breach Breachedaccount API",
    "version": "3.0.0"
  },
  "items": [
    {
      "info": {
        "name": "Breachedaccount",
        "type": "folder"
      },
      "items": [
        {
          "info": {
            "name": "Get all breaches for an account",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://haveibeenpwned.com/api/v3/breachedaccount/:account",
            "headers": [
              {
                "name": "user-agent",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "account",
                "value": "",
                "type": "path",
                "description": "URL-encoded account to search for (email address, username, or phone number)"
              },
              {
                "name": "truncateResponse",
                "value": "",
                "type": "query",
                "description": "Returns the full breach model when false. By default, only the name of the breach is returned rather than the complete breach data."
              },
              {
                "name": "domain",
                "value": "",
                "type": "query",
                "description": "Filters the result set to only breaches against the domain specified. It is possible that one site (and consequently domain), is compromised on multiple occasions."
              },
              {
                "name": "includeUnverified",
                "value": "",
                "type": "query",
                "description": "Returns breaches that have been flagged as 'unverified'. By default, both verified and unverified breaches are returned when performing a search."
              }
            ],
            "auth": {
              "type": "apikey",
              "key": "hibp-api-key",
              "value": "{{hibp-api-key}}",
              "placement": "header"
            }
          },
          "docs": "Available on Core, Pro, and High RPM subscriptions. Returns the breaches for the supplied account (email address, username, or phone number). The account is not case-sensitive and is trimmed of leading or trailing whitespace. The account should always be URL encoded. This is an authenticated API requiring both the hibp-api-key and user-agent headers. Test API keys can be used to query test accounts on the hibp-integration-tests.com domain."
        },
        {
          "info": {
            "name": "Get all breached account hashes for a range",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "https://haveibeenpwned.com/api/v3/breachedaccount/range/:prefix",
            "headers": [
              {
                "name": "user-agent",
                "value": ""
              }
            ],
            "params": [
              {
                "name": "prefix",
                "value": "",
                "type": "path",
                "description": "First 6 characters of the SHA-1 hash of the email address to search for (hexadecimal, not case-sensitive)"
              }
            ],
            "auth": {
              "type": "apikey",
              "key": "hibp-api-key",
              "value": "{{hibp-api-key}}",
              "placement": "header"
            }
          },
          "docs": "Available on Pro and High RPM subscriptions. Search breached accounts via k-anonymity by providing the first 6 characters of the SHA-1 hash of a normalised email address. The response contains matching hash suffixes and associated breach names after public filtering. Sensitive and retired breaches are not returned. Per the terms of use, any results that do not match the target account being searched must be discarded immediately and not stored or further processed."
        }
      ]
    }
  ],
  "bundled": true
}