---
title: "Export multiple monitoring runs in one ZIP"
method: POST
path: "/notification_runs/export"
tags: ["Notifications Runs"]
---

# Export multiple monitoring runs in one ZIP

`POST /notification_runs/export`

## Request

- Base URL: `https://api.leakradar.io`
- URL: `https://api.leakradar.io/notification_runs/export`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/leakradar/apis/leakradar-io-api/docs/notification_runs/export/post.ts> (a function with typed inputs; its response is checked against the schema)

Provide run_ids or filters (sent_after inclusive, sent_before exclusive). Filter selection includes only Stealer Logs and Combolist runs. Use exclude_run_ids with filters to deselect individual results. At most 1000 runs are frozen when queued. One background export produces a file per run and summary.json. Only unlocked credentials are included, unless the owner currently has points bypass. No points are spent. The entire job fails if it exceeds 5 million exported rows or its time limit. At most five exports may be queued or running per account.

## Request body

- BulkNotificationRunExport
  - `run_ids` integer[], nullable
  - `filters` NotificationRunFilters
    - `dataset` 'stealer_logs' | 'combolist' | 'databases' | 'raw_files' | 'dark_web', nullable
    - `status` 'new' | 'in_progress' | 'fixed' | 'accepted_risk'
    - `sent_after` string, date-time, nullable
    - `sent_before` string, date-time, nullable
    - `notification_id` integer, nullable
    - `q` string, nullable
  - `exclude_run_ids` integer[]
  - `format` 'csv' | 'txt' | 'json'

## Response `200`

Successful Response

- ExportResponse
  - `status` string, required: Export job status: 'queued', 'processing', 'completed', or 'failed'.
  - `message` string, required: Human-readable status message.
  - `export_id` integer, required: ID of the export job. Use this to check status or download the result.

## Other responses

- `422`: Validation Error

## Changes

- **2026-10-13** `180678ba6e6e`: 2 info
  - added the new optional request property `filters/anyOf[subschema #1: NotificationRunFilters]/notification_id`
  - added the new optional request property `filters/anyOf[subschema #1: NotificationRunFilters]/q`
- **2026-10-05** `351113e6b21d`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/leakradar/apis/leakradar-io-api/changes/notification_runs/export/post.md)

---

[API](https://skmtc.dev/leakradar/apis/leakradar-io-api.md) - [All operations](https://skmtc.dev/leakradar/apis/leakradar-io-api/llms.txt) - [OpenAPI document](https://skmtc.dev/leakradar/apis/leakradar-io-api/revisions/8dcd4b54cc4a?raw)
