Find exposure from breaches that look AI-agent-sourced

Returns stolen session and credential records for an address where the source dump's own announcement text suggests an AI agent, rather than a traditional phishing or malware campaign, was involved in obtaining it.

This is a heuristic, not an attribution. It is a keyword classifier over dump-announcement text, with no labelled ground truth. A match is a reason to look closer, and no match does not rule out an AI-agent-involved breach. For unfiltered stolen-session exposure on the same address, use /v1/metered/session-risk.

Billing. $0.35 per successful call, metered to your card. Failed calls are never billed. Threat Intelligence subscribers and AWS Marketplace bundle customers call this at no extra charge. Unlike the other metered endpoints this one does not check a prepaid credit balance before running, so it never returns 402.

Note. Reads the same corpus as /v1/metered/session-risk, filtered to records the ingestion pipeline flagged as suspected-agentic-source. Also billed as an AWS Marketplace Bundle D dimension for bundle customers.