LEleakradar
Notifications

Update notification

Changed on

Update an existing notification owned by the current account. All type-specific rules from creation apply.

patch/notifications/{notification_id}

Request

Path parameters

notification_idinteger required

ID of the notification.

Request body

method_idinteger nullable

Notification method ID to use.

dataset'stealer_logs' | 'combolist' | 'raw_files' | 'dark_web'

Dataset to monitor. For email, domain and advanced: stealer_logs (default) or combolist. raw alerts are bound to raw_files and dark_web alerts to dark_web: the server sets it from the type and rejects any other value (stealer_logs is still accepted there as the historical default).

type'email' | 'domain' | 'advanced' | 'raw' | 'dark_web' required
valuestring nullable

Value to monitor (required for EMAIL/DOMAIN types).

filtersobject nullable

Filters when type=ADVANCED or RAW. Parsed according to type.

auto_unlockboolean nullable

If true, automatically unlock new matching leaks (consumes points).

max_pointsinteger nullable

Daily points cap for auto-unlock (if enabled).

second_type'ALL' | 'EMPLOYEES' | 'THIRD_PARTIES' | 'CUSTOMERS'
bulkboolean nullable

Create multiple notifications at once (e.g., newline-separated values).

Example request

{
  "method_id": 1,
  "type": "domain",
  "value": "example.com"
}

Response

Notification updated successfully.

idinteger required

Notification ID.

method_idinteger required

ID of the notification method used for delivery.

type'email' | 'domain' | 'advanced' | 'raw' | 'dark_web' required
dataset'stealer_logs' | 'combolist' | 'databases' | 'raw_files' | 'dark_web'

Dataset monitored by this notification: stealer_logs, combolist or databases for credential alerts (email, domain, advanced), raw_files for raw alerts, dark_web for dark web alerts.

second_type'ALL' | 'EMPLOYEES' | 'THIRD_PARTIES' | 'CUSTOMERS'
valuestring nullable

Monitored value (email address, domain, search query, etc.).

filtersobject nullable

Additional search filters applied to this notification.

labelstring nullable

Human label of the monitored asset: value when set, otherwise a summary of filters (raw, dark web and advanced alerts). Same label as the alert emails and the runs.

last_searched_atstring date-time nullable

Last time this notification was checked for new results.

is_activeboolean required

Whether this notification is currently active.

timestampstring date-time required

Creation date of this notification.

method_type'email' | 'slack' | 'telegram' | 'webhook' | 'discord'
method_namestring nullable

User-given label of the associated method, null when unnamed.

method_valuestring nullable

Destination of the associated method.

method_status'active' | 'suspended' | 'paused' nullable

Delivery state of the associated method (see status of notification methods). When it is not active, this notification keeps running but its alerts are not sent.

method_extra_emailsstring[] nullable

Additional BCC recipients of the associated method (email methods only).

auto_unlockboolean nullable

Whether new results are automatically unlocked.

max_pointsinteger nullable

Maximum points to spend per notification run for auto-unlock.

daily_spentinteger nullable

Points spent today by auto-unlock on this notification.

daily_reset_atstring date-time nullable

Next daily reset time for the spent counter.

total_notificationsinteger nullable

Total number of notification runs executed.

total_costinteger nullable

Total points consumed by this notification across all runs.

Changes

  • 180678ba6e6eRevision changes
    • info

      added the optional property to the response with the status

    • info

      added the optional property to the response with the status

  • 4939be6a7cccRevision changes
    • info

      added the optional property to the response with the status