Account
Pull plan, usage, domains, and key metadata with your secret API key.
Pull account status with a secret API key. Returns plan, live-check usage, overage rates, licensed/verified domains, key metadata (prefix only), and rate limits. Never returns raw key material.
Workspace secret key (sk_test_… / sk_live_…). Prefer test keys in these docs. Create keys in the console — never commit real values.
In: header
Header Parameters
Optional client correlation id. Echoed on the response; minted when omitted.
8 <= length <= 128Response Body
application/json
application/problem+json
application/problem+json
application/problem+json
curl -X GET "https://example.com/api/v1/account"{ "workspace": { "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08", "name": "string" }, "plan": { "id": "string", "name": "string", "price": "string", "priceCents": 0, "status": "string", "trialing": true, "trialEndsAt": "2019-08-24T14:15:22Z", "domainSeats": 0 }, "usage": { "checksUsed": 0, "monthlyChecks": 0, "remaining": 0, "percentUsed": 0, "testChecksUsed": 0, "overageUsed": 0, "overageCents": 0, "overageRate": "string", "allowsOverage": true, "periodStart": "string", "periodEnd": "string", "liveChecksAllowed": true, "liveApiAccessAllowed": true }, "domains": { "licensed": [ "string" ], "verified": [ "string" ], "staging": [ "string" ], "max": 0, "seats": 0 }, "key": { "kind": "string", "env": "string", "prefix": "string", "scope": "string", "websiteHostname": "string" }, "limits": { "apiRateLimit": 0, "apiRateWindowSec": 0, "edgeRateLimit": 0, "edgeRateWindowSec": 0, "maxTeamMembers": 0, "monitoredIdentities": 0 }, "features": [ "string" ]}Risk Check
Server-side risk scoring with your secret API key.
Monitor
Daily exposure monitoring for domains you own and people you name. Three layers: employees on your systems and elsewhere (DNS-verified company domain), and users of your app (licensed app login host, e.g. app.acme.com). Alerts report where credentials appeared — never passwords. No auto-enroll.