---
title: "List URLs for a domain"
method: GET
path: "/search/domain/{domain}/urls"
tags: ["Search Domain"]
---

# List URLs for a domain

`GET /search/domain/{domain}/urls`

## Request

- Base URL: `https://api.leakradar.io`
- URL: `https://api.leakradar.io/search/domain/{domain}/urls`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/leakradar/apis/leakradar-io-api/docs/search/domain/:domain/urls/get.ts> (a function with typed inputs; its response is checked against the schema)

Return a paginated list of distinct URLs for the given domain with their occurrence counts.

**Query parameters**
- `page` starts at 1.
- `page_size` is 1 to 1000 (default 100).
- `search` optional wildcard filter on URL.

**Access and visibility**
- If your plan includes `domain_search`, full URLs are returned.
- Otherwise URLs are redacted except for the first 10 items per page. If `search` is provided and you are not entitled, results are redacted.

## Path parameters

- `domain` string, required: Domain to list URLs for, e.g. `example.com`.

## Query parameters

- `search` string, nullable: Optional wildcard filter on url.
- `page` integer: Page number (starts at 1).
- `page_size` integer: Items per page (1–1000, default 100).

## Response `200`

Results returned successfully.

- PaginatedResponseURLOccurrences
  - `items` URLOccurrences[], required: List of items for the current page.
    - `url` string, required: URL value.
    - `occurrences` integer, required: Number of leaked credentials associated with this URL.
  - `total` integer, required: Total number of matching items.
  - `page` integer, required: Current page number.
  - `page_size` integer, required: Number of items per page.
  - `blacklisted_value` string, nullable: If a filter value matched a blacklist entry, this field contains the matched value.

## Other responses

- `401`: Authentication required, or invalid/expired API key.
- `403`: Account banned, or pending email verification.
- `422`: Validation Error
- `429`: Rate limit exceeded. See Retry-After / X-RateLimit-* headers.
- `503`: Domain search under maintenance, or public API temporarily disabled.

## Changes

- **2026-09-01** `82a99c608e1a`: 7 info
  - added the non-success response with the status `401`
  - added the non-success response with the status `403`
  - added the non-success response with the status `429`
  - added the non-success response with the status `503`
  - …3 more
- **2025-04-24** `db95897b513a`: 1 info
  - removed the non-success response with the status `429`

[Operation history](https://skmtc.dev/leakradar/apis/leakradar-io-api/changes/search/domain/:domain/urls/get.md)

---

[API](https://skmtc.dev/leakradar/apis/leakradar-io-api.md) - [All operations](https://skmtc.dev/leakradar/apis/leakradar-io-api/llms.txt) - [OpenAPI document](https://skmtc.dev/leakradar/apis/leakradar-io-api/revisions/8dcd4b54cc4a?raw)