Skip to main content
All endpoints (except /api/health and /api/docs) require a valid API key. Pass it via the Authorization: Bearer <api_key> header or X-API-Key: <api_key>. Your key is the api_key field in your account profile.

Welcome

The neur-a API is a standalone REST service (port 5001) providing multi-source intelligence search across breach databases, stealer logs, IP/phone/person lookups, and social platform profiles. Authentication is handled via Bearer tokens tied to your account plan. Usage is metered per request and enforced across monthly, daily, and hourly windows depending on your plan tier.

Base URL


Authentication

All protected endpoints require a Bearer token from your account.
Pass your API key using either header:

Rate Limits & Plans

Standard endpoints are limited to 10 req/min per IP. The POST /api/deep-search endpoint is limited to 5 req/min per IP.
Check your current usage and limits at any time using GET /api/me. The response includes your current plan tier, expiry, and per-window usage counts.

Account Info

string
Your account username.
string
Your current plan: free, pro, plus, or enterprise.
string
ISO 8601 timestamp of when your plan expires.
integer
Total API calls made this month.
integer
API calls made today.
integer
API calls made this hour.
integer
Maximum daily calls allowed by your plan.
integer
Maximum hourly calls allowed by your plan.
integer
Maximum monthly calls allowed by your plan.
integer
Daily limit for StealerLogs-specific endpoints.

Endpoint Overview

Search & Intelligence
  • POST /api/leak-search — Email breach lookup
  • POST /api/ip-search — IP intelligence
  • POST /api/phone-search — Phone lookup
  • POST /api/person-search — Name/person search
  • POST /api/deep-search — Recursive deep search
  • GET /api/deep-search/<job_id> — Poll deep search job
Social Platforms
  • POST /api/steam-search
  • POST /api/tiktok-search
  • POST /api/snapchat-search
  • POST /api/discord-search
  • POST /api/discord-to-roblox
  • POST /api/roblox-search
StealerLogs
  • POST /api/stealerlogs-search
  • GET /api/stealerlogs-file/<file_id>
  • POST /api/stealerlogs-victims-search
  • GET /api/stealerlogs-victims/<log_id>
  • GET /api/stealerlogs-victims/<log_id>/files/<file_id>
  • GET /api/stealerlogs-victims/<log_id>/archive
Utility
  • GET /api/health — Service status (no auth)
  • GET /api/docs — Auto-generated docs (no auth)
  • GET /api/me — Account stats and limits

Standard Response Format

Most search endpoints return a consistent envelope:
object
A map of source names to their data and metadata. Each key is a database/provider name.
integer
Number of sources that returned results.
integer
Total number of records returned across all sources.
string
Cost of the query (typically "0" for metered plans).
string
Server-side query duration (e.g. "0s").