curl --request POST \
--url https://{hostname}/v1/lookup \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"identifiers": [
{
"type": "email",
"value": "target@example.com"
},
{
"type": "phone",
"value": "+15551234567"
}
],
"options": {
"depth": "standard",
"requester_reference": "CASE-2026-00412"
}
}
'{
"request_id": "req_01JNQBC4X8Y2Z3A",
"queried_at": "2026-02-19T14:23:00Z",
"resolution": {
"status": "resolved",
"confidence": 0.91,
"entity_count": 1
},
"entities": [
{
"entity_id": "ent_01JNQBC4X8Y2Z3B",
"confidence": 0.91,
"profile": {
"person": {
"first_name": "John",
"middle_name": "A",
"last_name": "Doe",
"full_name": "John A. Doe",
"age": 42,
"dob": "1984-03-15",
"confidence": 0.95,
"sources": [
"src_001",
"src_004"
]
},
"phones": [
{
"number": "+15551234567",
"confidence": 0.87,
"sources": [
"src_002"
],
"type": "mobile",
"carrier": "Verizon Wireless",
"country": "US",
"is_connected": true,
"first_reported_date": "2018-06-01",
"last_reported_date": "2026-01-15"
}
],
"emails": [
{
"email": "john.doe@example.com",
"confidence": 0.98,
"sources": [
"src_001"
]
}
],
"addresses": [
{
"address": "123 Main St, Springfield, IL 62704",
"confidence": 0.82,
"sources": [
"src_003"
],
"country": "US",
"first_reported_date": "2015-03-01",
"last_reported_date": "2026-01-10"
}
],
"social_profiles": [
{
"platform": "twitter",
"confidence": 0.89,
"sources": [
"src_002"
],
"username": "jdoe_real",
"bio": "Software engineer and open source contributor.",
"profile_url": "https://x.com/jdoe_real",
"profile_photo": "<string>",
"followers_count": 1240,
"following_count": 380,
"verified": false,
"joined_date": "2019-05-12",
"extended": {}
}
],
"organizations": [
{
"organization_name": "Acme Corporation",
"confidence": 0.9,
"sources": [
"src_006"
],
"industry": "Technology",
"domain": "acme.com",
"website": "https://acme.com",
"employees": "500-1000",
"founded_year": 2005,
"revenue": "$50M-$100M",
"jurisdiction_code": "us_de",
"company_number": "5738291",
"current_status": "Active",
"incorporation_date": "2005-08-15",
"registered_address_in_full": "1209 Orange St, Wilmington, DE 19801"
}
],
"network": {
"domains": [
{
"domain": "example.com",
"sources": [
"src_007"
],
"created_date": "2003-08-15",
"registrar": "Example Registrar Inc.",
"nameservers": "ns1.example.com, ns2.example.com",
"whois_server": "whois.example-registrar.com",
"status": "clientTransferProhibited"
}
],
"ips": [
{
"ip": "192.0.2.1",
"sources": [
"src_007"
]
}
],
"ssl_certificates": [
{
"sources": [
"src_007"
],
"subject": "CN=example.com",
"issuer": "CN=R3, O=Let's Encrypt, C=US",
"fingerprint": "A1:B2:C3:D4:E5:F6:...",
"valid_from": "2026-01-01T00:00:00Z",
"valid_until": "2026-04-01T00:00:00Z",
"alt_names": "example.com, www.example.com"
}
],
"services": [
{
"port": 443,
"sources": [
"src_008"
],
"service": "https",
"protocol": "tcp",
"product": "nginx",
"version": "1.25.3"
}
]
},
"credentials": [
{
"sources": [
"src_009"
],
"email": "john.doe@example.com",
"username": "jdoe123",
"password": "<string>",
"hash": "$2b$12$...",
"source_name": "Collection #1",
"breach_date": "2019-01-01"
}
],
"associates": [
{
"confidence": 0.73,
"sources": [
"src_003"
],
"first_name": "Jane",
"middle_name": "<string>",
"last_name": "Smith",
"dob": "<string>",
"is_deceased": true,
"associate_of": "<string>"
}
],
"relatives": [
{
"confidence": 0.85,
"sources": [
"src_003"
],
"first_name": "Robert",
"middle_name": "<string>",
"last_name": "Doe",
"dob": "<string>",
"is_deceased": false,
"relative_type": "parent",
"city": "Springfield",
"state": "IL"
}
],
"indicators": {
"has_bankruptcy_records": true,
"has_business_records": true,
"has_divorce_records": true,
"has_domains_records": true,
"has_evictions_records": true,
"has_fein_records": true,
"has_foreclosures_records": true,
"has_judgment_records": true,
"has_lien_records": true,
"has_marriage_records": true,
"has_professional_license_records": true,
"has_property_records": true,
"has_vehicle_registrations_records": true,
"has_workplace_records": true,
"has_dea_records": true,
"has_debt_records": true,
"sources": [
"src_003"
]
},
"geolocation": [
{
"latitude": 39.7817,
"longitude": -89.6501,
"sources": [
"src_003"
],
"title": "Springfield, IL"
}
],
"web_results": [
{
"title": "John Doe - Professional Profile",
"url": "https://example.com/profiles/jdoe",
"sources": [
"src_010"
],
"snippet": "John Doe is a software engineer based in Springfield..."
}
]
},
"traceability": {
"report_hash": "sha256:abc123def456...",
"signed_at": "2026-02-19T14:23:01Z",
"sources": [
{
"id": "src_001",
"name": "Person Data Provider",
"category": "person_data",
"retrieved_at": "2026-02-19T14:23:00Z",
"confidence": 0.92
}
],
"data_lineage": {
"profile.person.full_name": [
"src_001",
"src_004"
],
"profile.phones[0].number": [
"src_002"
]
},
"report_signature": "sig_base64..."
}
}
],
"source_coverage": {
"available": [
"connector_001",
"connector_002",
"connector_003"
],
"unavailable": [
"connector_004"
],
"unavailability_reason": "egress_blocked"
},
"audit": {
"request_id": "req_01JNQBC4X8Y2Z3A",
"principal": {
"type": "user",
"user_id": "u_analyst_jdoe",
"user_email": "analyst@example.com",
"idp_session_id": "saml_sess_abc123",
"api_key_id": "key_svc_01",
"service_account_name": "integration-prod"
},
"organization_id": "org_example_001",
"source_ip": "10.14.2.55",
"logged_at": "2026-02-19T14:23:01Z",
"requester_reference": "CASE-2026-00412",
"identifiers_queried": 2
}
}Resolves one or more identifiers to an entity profile. The engine attempts to merge all provided identifiers into a single entity. When resolution is ambiguous, all candidate entities are returned ranked by confidence.
Every call is logged immutably to the audit trail with the authenticated principal’s identity.
If one or more intelligence connectors are unreachable (e.g. blocked by
firewall egress rules), the response is still returned with the data collected
from available connectors. The source_coverage object discloses which
connectors were available and which were not.
curl --request POST \
--url https://{hostname}/v1/lookup \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"identifiers": [
{
"type": "email",
"value": "target@example.com"
},
{
"type": "phone",
"value": "+15551234567"
}
],
"options": {
"depth": "standard",
"requester_reference": "CASE-2026-00412"
}
}
'{
"request_id": "req_01JNQBC4X8Y2Z3A",
"queried_at": "2026-02-19T14:23:00Z",
"resolution": {
"status": "resolved",
"confidence": 0.91,
"entity_count": 1
},
"entities": [
{
"entity_id": "ent_01JNQBC4X8Y2Z3B",
"confidence": 0.91,
"profile": {
"person": {
"first_name": "John",
"middle_name": "A",
"last_name": "Doe",
"full_name": "John A. Doe",
"age": 42,
"dob": "1984-03-15",
"confidence": 0.95,
"sources": [
"src_001",
"src_004"
]
},
"phones": [
{
"number": "+15551234567",
"confidence": 0.87,
"sources": [
"src_002"
],
"type": "mobile",
"carrier": "Verizon Wireless",
"country": "US",
"is_connected": true,
"first_reported_date": "2018-06-01",
"last_reported_date": "2026-01-15"
}
],
"emails": [
{
"email": "john.doe@example.com",
"confidence": 0.98,
"sources": [
"src_001"
]
}
],
"addresses": [
{
"address": "123 Main St, Springfield, IL 62704",
"confidence": 0.82,
"sources": [
"src_003"
],
"country": "US",
"first_reported_date": "2015-03-01",
"last_reported_date": "2026-01-10"
}
],
"social_profiles": [
{
"platform": "twitter",
"confidence": 0.89,
"sources": [
"src_002"
],
"username": "jdoe_real",
"bio": "Software engineer and open source contributor.",
"profile_url": "https://x.com/jdoe_real",
"profile_photo": "<string>",
"followers_count": 1240,
"following_count": 380,
"verified": false,
"joined_date": "2019-05-12",
"extended": {}
}
],
"organizations": [
{
"organization_name": "Acme Corporation",
"confidence": 0.9,
"sources": [
"src_006"
],
"industry": "Technology",
"domain": "acme.com",
"website": "https://acme.com",
"employees": "500-1000",
"founded_year": 2005,
"revenue": "$50M-$100M",
"jurisdiction_code": "us_de",
"company_number": "5738291",
"current_status": "Active",
"incorporation_date": "2005-08-15",
"registered_address_in_full": "1209 Orange St, Wilmington, DE 19801"
}
],
"network": {
"domains": [
{
"domain": "example.com",
"sources": [
"src_007"
],
"created_date": "2003-08-15",
"registrar": "Example Registrar Inc.",
"nameservers": "ns1.example.com, ns2.example.com",
"whois_server": "whois.example-registrar.com",
"status": "clientTransferProhibited"
}
],
"ips": [
{
"ip": "192.0.2.1",
"sources": [
"src_007"
]
}
],
"ssl_certificates": [
{
"sources": [
"src_007"
],
"subject": "CN=example.com",
"issuer": "CN=R3, O=Let's Encrypt, C=US",
"fingerprint": "A1:B2:C3:D4:E5:F6:...",
"valid_from": "2026-01-01T00:00:00Z",
"valid_until": "2026-04-01T00:00:00Z",
"alt_names": "example.com, www.example.com"
}
],
"services": [
{
"port": 443,
"sources": [
"src_008"
],
"service": "https",
"protocol": "tcp",
"product": "nginx",
"version": "1.25.3"
}
]
},
"credentials": [
{
"sources": [
"src_009"
],
"email": "john.doe@example.com",
"username": "jdoe123",
"password": "<string>",
"hash": "$2b$12$...",
"source_name": "Collection #1",
"breach_date": "2019-01-01"
}
],
"associates": [
{
"confidence": 0.73,
"sources": [
"src_003"
],
"first_name": "Jane",
"middle_name": "<string>",
"last_name": "Smith",
"dob": "<string>",
"is_deceased": true,
"associate_of": "<string>"
}
],
"relatives": [
{
"confidence": 0.85,
"sources": [
"src_003"
],
"first_name": "Robert",
"middle_name": "<string>",
"last_name": "Doe",
"dob": "<string>",
"is_deceased": false,
"relative_type": "parent",
"city": "Springfield",
"state": "IL"
}
],
"indicators": {
"has_bankruptcy_records": true,
"has_business_records": true,
"has_divorce_records": true,
"has_domains_records": true,
"has_evictions_records": true,
"has_fein_records": true,
"has_foreclosures_records": true,
"has_judgment_records": true,
"has_lien_records": true,
"has_marriage_records": true,
"has_professional_license_records": true,
"has_property_records": true,
"has_vehicle_registrations_records": true,
"has_workplace_records": true,
"has_dea_records": true,
"has_debt_records": true,
"sources": [
"src_003"
]
},
"geolocation": [
{
"latitude": 39.7817,
"longitude": -89.6501,
"sources": [
"src_003"
],
"title": "Springfield, IL"
}
],
"web_results": [
{
"title": "John Doe - Professional Profile",
"url": "https://example.com/profiles/jdoe",
"sources": [
"src_010"
],
"snippet": "John Doe is a software engineer based in Springfield..."
}
]
},
"traceability": {
"report_hash": "sha256:abc123def456...",
"signed_at": "2026-02-19T14:23:01Z",
"sources": [
{
"id": "src_001",
"name": "Person Data Provider",
"category": "person_data",
"retrieved_at": "2026-02-19T14:23:00Z",
"confidence": 0.92
}
],
"data_lineage": {
"profile.person.full_name": [
"src_001",
"src_004"
],
"profile.phones[0].number": [
"src_002"
]
},
"report_signature": "sig_base64..."
}
}
],
"source_coverage": {
"available": [
"connector_001",
"connector_002",
"connector_003"
],
"unavailable": [
"connector_004"
],
"unavailability_reason": "egress_blocked"
},
"audit": {
"request_id": "req_01JNQBC4X8Y2Z3A",
"principal": {
"type": "user",
"user_id": "u_analyst_jdoe",
"user_email": "analyst@example.com",
"idp_session_id": "saml_sess_abc123",
"api_key_id": "key_svc_01",
"service_account_name": "integration-prod"
},
"organization_id": "org_example_001",
"source_ip": "10.14.2.55",
"logged_at": "2026-02-19T14:23:01Z",
"requester_reference": "CASE-2026-00412",
"identifiers_queried": 2
}
}JWT issued by your organization's SAML/OIDC identity provider after
authentication. Required for user-attributed queries. The sub claim
is recorded verbatim in the audit trail.
Lookup completed. Results may be partial if some connectors were unavailable.
Unique identifier for this lookup. Use it to retrieve results later or to pull the PDF report.
"req_01JNQBC4X8Y2Z3A"
UTC timestamp when the query was received.
"2026-02-19T14:23:00Z"
Show child attributes
Resolved entity profiles. Contains one entry when resolution is unambiguous.
Contains multiple entries ranked by confidence when the engine cannot
determine a single match.
Show child attributes
Discloses which connectors were reachable during this query and which were not. Always included in the response and the PDF report to ensure completeness transparency in evidentiary contexts.
Show child attributes
Show child attributes