---
title: "Suggest Android apps"
method: GET
path: "/search/applications"
tags: ["Search Applications"]
---

# Suggest Android apps

`GET /search/applications`

## Request

- Base URL: `https://api.leakradar.io`
- URL: `https://api.leakradar.io/search/applications`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/leakradar/apis/leakradar-io-api/docs/search/applications/get.ts> (a function with typed inputs; its response is checked against the schema)

Android apps found in the Stealer Logs, ordered by number of entries. `q` matches the app name or the package. Without `q`, returns the apps with the most entries.

Use the returned `package` with `GET /search/applications/{package}/leaks`.

Served from a catalog refreshed every hour (`updated_at`). Not counted in the daily request cap.

## Query parameters

- `q` string, nullable: Part of the app name or package (3 characters minimum). Omit it for the top apps.
- `limit` integer: Number of apps returned (1-50, default 20).

## Response `200`

Apps returned successfully.

- ApplicationCatalogResponse
  - `items` ApplicationCatalogItem[], required
    - `package` string, required: Android application id, e.g. com.netflix.mediaclient.
    - `name` string, nullable: Google Play name; null when the app is not on Google Play.
    - `icon_url` string, nullable: 64 px icon hosted by LeakRadar.
    - `developer` string, nullable: Developer name on Google Play.
    - `category` string, nullable: Google Play category, e.g. SOCIAL.
    - `leak_count` integer, required: Stealer Logs credentials saved for this app.
    - `leaks_7d` integer, required: Credentials indexed over the last 7 days.
    - `first_seen_at` string, date-time, nullable: First indexation of a credential for this app.
    - `last_seen_at` string, date-time, nullable: Last indexation of a credential for this app.
  - `updated_at` string, date-time, nullable: Last refresh of the catalog.

## Other responses

- `401`: Authentication required, or invalid/expired API key.
- `422`: `q` shorter than 3 characters.
- `429`: Rate limit exceeded. See Retry-After / X-RateLimit-* headers.

## Changes

- **2026-10-06** `2083d6cb0a44`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/leakradar/apis/leakradar-io-api/changes/search/applications/get.md)

---

[API](https://skmtc.dev/leakradar/apis/leakradar-io-api.md) - [All operations](https://skmtc.dev/leakradar/apis/leakradar-io-api/llms.txt) - [OpenAPI document](https://skmtc.dev/leakradar/apis/leakradar-io-api/revisions/8dcd4b54cc4a?raw)