Skip to main content
All API endpoints require a bearer token in the Authorization header.
Radar is included in the Free plan, but it still requires authentication. Create an Osintly account, generate a free API key, then call GET /radar/breaches and GET /radar/breaches/{name} with that key.
If your key belongs to a plan without Radar enabled, these endpoints return 403 with PLAN_FEATURE_REQUIRED.

Header format

Use the root auth endpoint GET / to quickly validate a token.

Validate token

Expected success response:

Example Radar request (free API key)

Security Best Practices

  • Never commit API keys to git repositories
  • Store tokens in environment variables
  • Use separate keys for development and production
  • Rotate keys immediately after suspected exposure
If a token is exposed, revoke and replace it before any new deployment.

Terms and ethics

Next Steps

Continue with Quick Start to create and stream your first search.