# LeakLens — Public Registry of Data Leaks & Exposures

> Independent, non-commercial public registry documenting data breach incidents and providing privacy auditing tools.

LeakLens helps individuals, security researchers, and AI agents audit whether credentials, phone numbers, or corporate domain records have appeared in documented data breaches.

## Key Pages & Documentation

- [Data Leak Registry](https://leaklens.org/database): Search and browse all 776+ verified public data breach incidents.
- [CVE & Threat Registry](https://leaklens.org/cve): Public catalog of Component Vulnerabilities & Exposures (CVEs) with live CVSS threat scores.
- [Breach Exposure Scanner](https://leaklens.org/scanner): Free tool to check if an email, password, or phone number was exposed in data breaches.
- [Civic Explainer Guides](https://leaklens.org/explainers): Security educational guides including k-Anonymity privacy protocols.
- [k-Anonymity Privacy Guide](https://leaklens.org/explainers/kanonymity-guide): Technical explainer on checking leaks without revealing your raw email.
- [Security Methodology](https://leaklens.org/methodology): Independent verification protocols and civic watchdog principles.

## Developer & Agent APIs

- [Public API Documentation](https://leaklens.org/api): OpenAPI specification and REST endpoints for data breach lookups.
- [OpenAPI Specification](https://leaklens.org/openapi.json): Standardized OpenAPI 3.0 JSON specification.
- [API Catalog Manifest](https://leaklens.org/.well-known/api-catalog): RFC 9264 API discovery catalog.
- [MCP Server Card](https://leaklens.org/.well-known/mcp/server-card.json): Model Context Protocol (MCP) server integration card.
- [A2A Agent Card](https://leaklens.org/.well-known/agent-card.json): Agent-to-Agent discovery card per A2A protocol specification.
- [Agent Authorization Specs](https://leaklens.org/auth.md): Agent authentication and rate-limiting guidelines.

## Key API Endpoints

- [k-Anonymity Hash Endpoint](https://leaklens.org/api/v1/audit/hash/40BD0): Privacy-preserving 5-character SHA-1 prefix password audit.
- [Breach Registry API](https://leaklens.org/api/v1/registry/leaks): Full JSON catalog of documented data breach incidents.
- [CVE Advisory API](https://leaklens.org/api/v1/cve/CVE-2025-1889): Structured JSON API for vulnerability threat scores and CISA KEV status.