---
title: "List all leaks for a domain (employees + customers + third parties)"
method: GET
path: "/search/domain/{domain}/all"
tags: ["Search Domain"]
---

# List all leaks for a domain (employees + customers + third parties)

`GET /search/domain/{domain}/all`

## Request

- Base URL: `https://api.leakradar.io`
- URL: `https://api.leakradar.io/search/domain/{domain}/all`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/leakradar/apis/leakradar-io-api/docs/search/domain/:domain/all/get.ts> (a function with typed inputs; its response is checked against the schema)

Return a paginated list of **all** leaks linked to a domain, regardless of
category (employees, customers, third parties).

Each item includes a `category` field indicating whether the leak belongs
to employees, customers, or third parties.

**Query parameters**
- `page` starts at 1.
- `page_size` is 1 to 1000 (default 100).
- `search` optional term to narrow results.
- `is_email` optional boolean to filter emails (true), usernames (false), or both (null).

**Access and visibility**
- If your plan includes `domain_search`, full URLs and item IDs are returned.
- Otherwise URLs are redacted except for the first 10 items per page and IDs are omitted.
- Credentials are included only for items with `unlocked=true` and if your plan includes `domain_search`.

**Response**
`PaginatedAllLeaksResponse` with `items`, `total`, `total_unlocked`, `page`, `page_size`.

**Auto-unlock**
Pass `auto_unlock=true` to automatically unlock locked items on the current page. Points are consumed per newly unlocked item. If insufficient points, partial unlock is performed. The response field `auto_unlock_points_consumed` indicates how many points were used.

## Path parameters

- `domain` string, required: Domain to list leaks for, e.g. `example.com`.

## Query parameters

- `search` string, nullable: Optional search term to filter results.
- `is_email` boolean, nullable: Filter by identifier type: true=emails only, false=usernames only, null=both.
- `page` integer: Page number (starts at 1).
- `page_size` integer: Items per page (1–1000, default 100).
- `auto_unlock` boolean: Automatically unlock locked items on the current page using your points.

## Response `200`

Leaks returned successfully.

- PaginatedAllLeaksResponse
  - `items` AllLeakDetails[], required: List of leak records for the current page.
    - `id` string, nullable: Unique leak identifier. Only returned when the item is unlocked or the plan includes full access.
    - `url` string, nullable: Source URL where the credentials were found. Redacted for locked items on non-advanced plans.
    - `username` string, nullable: Leaked username or email address. Masked when locked.
    - `username_masked` string, nullable: Partially masked version of the username (e.g. j***@example.com).
    - `password` string, nullable: Leaked password. Only returned when the item is unlocked.
    - `password_strength` integer, nullable: Password strength raw score (integer, 0+). Categories: too_weak (0-2), weak (3-4), medium (5-7), strong (8+).
    - `unlocked` boolean: Whether this item has been unlocked by the current account.
    - `is_email` boolean, nullable: True if the username is an email address, false if it is a plain username.
    - `added_at` string, date-time, nullable: Date when this leak was added to the database.
    - `status` string, nullable: Remediation status of the unlocked leak: new, in_progress, fixed, accepted_risk. Only present for unlocked items.
    - `category` string, required: Leak category: 'employees', 'customers', or 'third_parties'.
  - `total` integer, required: Total number of matching leak records.
  - `total_unlocked` integer, required: Number of already-unlocked records in the total results.
  - `page` integer, required: Current page number.
  - `page_size` integer, required: Number of items per page.
  - `blacklisted_value` string, nullable: If a filter value matched a blacklist entry, this field contains the matched value.
  - `auto_unlock_points_consumed` integer, nullable: Number of points consumed by auto-unlock on this request.

## Other responses

- `400`: Pagination too deep (offset > 1,000,000 — use the matching `/export` endpoint).
- `401`: Authentication required, or invalid/expired API key.
- `403`: Account banned, or pending email verification.
- `422`: Validation Error
- `429`: Rate limit exceeded. Response includes `Retry-After`, `X-RateLimit-Limit`, `X-RateLimit-Remaining`, `X-RateLimit-Reset` headers.
- `503`: Domain search under maintenance, or public API temporarily disabled.

## Changes

- **2026-09-01** `82a99c608e1a`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/leakradar/apis/leakradar-io-api/changes/search/domain/:domain/all/get.md)

---

[API](https://skmtc.dev/leakradar/apis/leakradar-io-api.md) - [All operations](https://skmtc.dev/leakradar/apis/leakradar-io-api/llms.txt) - [OpenAPI document](https://skmtc.dev/leakradar/apis/leakradar-io-api/revisions/8dcd4b54cc4a?raw)