All endpoints (except
/api/health and /api/docs) require a valid API key. Pass it via the Authorization: Bearer <api_key> header or X-API-Key: <api_key>. Your key is the api_key field in your account profile.Welcome
The neur-a API is a standalone REST service (port5001) providing multi-source intelligence search across breach databases, stealer logs, IP/phone/person lookups, and social platform profiles.
Authentication is handled via Bearer tokens tied to your account plan. Usage is metered per request and enforced across monthly, daily, and hourly windows depending on your plan tier.
Base URL
Authentication
All protected endpoints require a Bearer token from your account.Rate Limits & Plans
Standard endpoints are limited to 10 req/min per IP. ThePOST /api/deep-search endpoint is limited to 5 req/min per IP.
Check your current usage and limits at any time using
GET /api/me. The response includes your current plan tier, expiry, and per-window usage counts.Account Info
string
Your account username.
string
Your current plan:
free, pro, plus, or enterprise.string
ISO 8601 timestamp of when your plan expires.
integer
Total API calls made this month.
integer
API calls made today.
integer
API calls made this hour.
integer
Maximum daily calls allowed by your plan.
integer
Maximum hourly calls allowed by your plan.
integer
Maximum monthly calls allowed by your plan.
integer
Daily limit for StealerLogs-specific endpoints.
Endpoint Overview
Search & Intelligence
POST /api/leak-search— Email breach lookupPOST /api/ip-search— IP intelligencePOST /api/phone-search— Phone lookupPOST /api/person-search— Name/person searchPOST /api/deep-search— Recursive deep searchGET /api/deep-search/<job_id>— Poll deep search job
POST /api/steam-searchPOST /api/tiktok-searchPOST /api/snapchat-searchPOST /api/discord-searchPOST /api/discord-to-robloxPOST /api/roblox-search
StealerLogs
POST /api/stealerlogs-searchGET /api/stealerlogs-file/<file_id>POST /api/stealerlogs-victims-searchGET /api/stealerlogs-victims/<log_id>GET /api/stealerlogs-victims/<log_id>/files/<file_id>GET /api/stealerlogs-victims/<log_id>/archive
GET /api/health— Service status (no auth)GET /api/docs— Auto-generated docs (no auth)GET /api/me— Account stats and limits
Standard Response Format
Most search endpoints return a consistent envelope:object
A map of source names to their data and metadata. Each key is a database/provider name.
integer
Number of sources that returned results.
integer
Total number of records returned across all sources.
string
Cost of the query (typically
"0" for metered plans).string
Server-side query duration (e.g.
"0s").