Dashboard

API

Send your account key as a bearer token. An active plan is required. The API allows 7 requests per second; over that returns 429. These examples say your_api_key until you sign in.

Account

GET https://stealerlogs.com/api/me. Returns the current plan, days left, and today's search limit. Plus and Pro reset at 00:00 UTC. Max has no search cap. Search requests past a daily limit are rejected.

GET https://stealerlogs.com/api/me
Authorization: Bearer your_api_key
GET https://stealerlogs.com/api/me
Authorization: Bearer your_api_key
{
  "plan": "access",
  "planName": "Pro",
  "active": true,
  "expiresAt": "2026-10-22T18:00:00.000Z",
  "daysLeft": 29,
  "limits": {
    "searchesPerDay": 1000,
    "searchesUsed": 12,
    "searchesRemaining": 988,
    "resetsAt": "2026-09-24T00:00:00.000Z"
  }
}
{
  "plan": "access",
  "planName": "Pro",
  "active": true,
  "expiresAt": "2026-10-22T18:00:00.000Z",
  "daysLeft": 29,
  "limits": {
    "searchesPerDay": 1000,
    "searchesUsed": 12,
    "searchesRemaining": 988,
    "resetsAt": "2026-09-24T00:00:00.000Z"
  }
}

Search

GET https://stealerlogs.com/api/search. Query parameter q is the term. type is one of url, email, email_domain, username, password, ip. wildcard=1 treats q as a wildcard, where ? is one character and _ is any number of characters. A backslash before either character searches for it. files=1 hides results with no files.

GET https://stealerlogs.com/api/[email protected]&type=email
Authorization: Bearer your_api_key

GET https://stealerlogs.com/api/[email protected]&type=email&wildcard=1
Authorization: Bearer your_api_key

GET https://stealerlogs.com/api/[email protected]&type=email&files=1
Authorization: Bearer your_api_key
GET https://stealerlogs.com/api/[email protected]&type=email
Authorization: Bearer your_api_key

GET https://stealerlogs.com/api/[email protected]&type=email&wildcard=1
Authorization: Bearer your_api_key

GET https://stealerlogs.com/api/[email protected]&type=email&files=1
Authorization: Bearer your_api_key

Response

{
  "hits": [
    {
      "id": "file_abc123",
      "dataType": "stealerlog",
      "origin": "https://accounts.google.com",
      "login": "[email protected]",
      "password": "Summer2024!",
      "timePosted": "2026-09-18T14:22:03Z",
      "source": "@cloudlogs"
    }
  ]
}
{
  "hits": [
    {
      "id": "file_abc123",
      "dataType": "stealerlog",
      "origin": "https://accounts.google.com",
      "login": "[email protected]",
      "password": "Summer2024!",
      "timePosted": "2026-09-18T14:22:03Z",
      "source": "@cloudlogs"
    }
  ]
}

Logs

The hit id opens that log. Credentials and cookies return 100 per page. Page starts at 1. Cookie responses include every domain in the log. Pass domains to filter, separated by commas. hide_expired=1 omits expired cookies.

GET https://stealerlogs.com/api/logs/{id}/credentials?page=1
GET https://stealerlogs.com/api/logs/{id}/cookies?page=1
GET https://stealerlogs.com/api/logs/{id}/cookies?domains=.youtube.com,.google.com&hide_expired=1
GET https://stealerlogs.com/api/logs/{id}/files?page=1
GET https://stealerlogs.com/api/logs/{id}/content?path=Autofill/Chrome.txt
Authorization: Bearer your_api_key
GET https://stealerlogs.com/api/logs/{id}/credentials?page=1
GET https://stealerlogs.com/api/logs/{id}/cookies?page=1
GET https://stealerlogs.com/api/logs/{id}/cookies?domains=.youtube.com,.google.com&hide_expired=1
GET https://stealerlogs.com/api/logs/{id}/files?page=1
GET https://stealerlogs.com/api/logs/{id}/content?path=Autofill/Chrome.txt
Authorization: Bearer your_api_key