Tools Reference - Osintly Documentation

Dates and clock times displayed in the Osintly tools interface and saved-result history are in UTC. API timestamps use their own explicit ISO 8601 offset, typically Z for UTC.

The Tools API exposes focused enrichment endpoints that run immediately and return a normalized JSON response. Use tools when you need a direct lookup for one observable, without creating a full Osintly search.

The web application applies lookup volume, cooldown, and concurrency rules to new tool lookups. See Tool usage limits. API-plan capacity is documented separately in API plans & capacity.

IP Intelligence

Investigate IP geolocation, network ownership, routing, services and threat indicators.

Domain Intelligence

Investigate DNS, certificates, registration, infrastructure and public exposure.

Epic Games

Validate and enrich Epic account identifiers, linked accounts, tags, regions, creator data, friends, and achievements.

Vehicle History Finder

Enrich US VINs and French license plates with vehicle identity, history signals, recalls, fluids, and capacity data.

Xbox

Enrich Xbox Live gamertags and XUIDs with profile, presence, social, games, media, clubs, and title details.

Steam

Enrich Steam vanity names and SteamID64 values with profiles, bans, games, friends, badges, groups, content, statistics, and inventory.

PlayStation Network

Enrich PSN online IDs and account IDs with profile, presence, trophy summary, and games.

Roblox

Enrich Roblox usernames and user IDs with profile, social, friends, groups, games, badges, and collectibles.

Social Club

Enrich Rockstar Social Club nicknames and Rockstar IDs with profile, linked platforms, crews, friends, and game history.

Enrich Reddit usernames with public profile metadata, archived posts and comments, communities, activity summaries, and comment threads.

Base URL

Production: https://api.osint.ly

All tool endpoints are under:

/tools

Authentication and access

Tools use the same bearer token model as the rest of the Osintly API.

curl -X GET "https://api.osint.ly/tools" \
  -H "Authorization: Bearer $OSINTLY_API_KEY"

Tool execution requires a paid API subscription with the tools feature enabled. This applies to every tool route, including routes marked as free. Currently, all Osintly API subscriptions available on osint.ly/api/pricing include access to tools. If the plan does not include tools, the API returns 403 PLAN_FEATURE_REQUIRED.

When to use tools

Use tools when	Use Search API when
You already know the observable type	You need full search orchestration
You want one direct enrichment response	You want module execution, streaming, and result persistence
You need low-overhead API calls	You need account discovery, leaks, BYOK, or webhooks
You want to call a specific signal group	You want Osintly to decide the relevant module set

Response pattern

Most tool responses follow the same envelope:

{
  "tool": "epic-games",
  "operation": "resolve",
  "query": {
    "value": "some-player",
    "type": "epic_display_name",
    "normalizedType": "epic_display_name"
  },
  "data": {},
  "meta": {
    "timestamp": "2026-06-28T12:00:00.000Z"
  }
}

The data object changes by operation. Endpoint schemas are documented in the generated Tools Endpoints section.

Saving `/all` results

POST /tools/<tool>/all can synchronously save the returned payload when you add save: true to the request body. This does not change the route cost. Saved responses include meta.savedResult.id and can be fetched later with:

curl -X GET "https://api.osint.ly/tools/results/<result_id>" \
  -H "Authorization: Bearer $OSINTLY_API_KEY"

Only the API key and creator that saved the result can retrieve it. To delete saved snapshots you no longer need, call POST /tools/results/delete with { "ids": ["<result-uuid>"] }. The request accepts 1–100 IDs, is all-or-nothing for inaccessible IDs, and returns 202 with the queued IDs when accepted. Deletion does not re-run enrichment.

Cost discovery

Browse the public Tools Registry at osint.ly/tools to discover currently listed tools and their categories. Every tool exposes a costs endpoint.

curl -X GET "https://api.osint.ly/tools/epic-games/costs" \
  -H "Authorization: Bearer $OSINTLY_API_KEY"

Free operations return no core-search credit charge, but still require paid Tools API access. Paid operations are priced by the route and are visible in the cost payload. The costs response contains defaultPrice and a routes array. Each route entry includes kind, method, quantity, and routePattern.

{
  "defaultPrice": null,
  "routes": [
    {
      "kind": "free",
      "method": "POST",
      "quantity": 0,
      "routePattern": "/search"
    },
    {
      "kind": "core_search",
      "method": "POST",
      "quantity": 3,
      "routePattern": "/all"
    }
  ]
}

For gaming tools, POST /search is validation-only. It validates and normalizes the submitted identifier without calling the provider or consuming credits. Use /all or the focused enrichment routes when you want provider-backed data.

Next steps

Review Epic Games
Review Vehicle History Finder
Review Xbox
Review Steam
Review PlayStation Network
Review Roblox
Review Social Club
Review Reddit
Review Tool usage limits
Explore endpoint schemas in Tools Endpoints

IP Intelligence

Domain Intelligence

Epic Games

Vehicle History Finder

Xbox

Steam

PlayStation Network

Roblox

Social Club

Reddit

​Base URL

​Authentication and access

​When to use tools

​Response pattern

​Saving /all results

​Cost discovery

​Next steps

Base URL

Authentication and access

When to use tools

Response pattern

Saving `/all` results

Cost discovery

Next steps