# Recorded Future Documentation

> Recorded Future API documentation

This file lists one part of the documentation. The full index is at https://docs.recordedfuture.com/llms.txt.

## API Documentation: Identity Intelligence
- Detections
  - [Detections](https://docs.recordedfuture.com/reference/identity-detections.md): Retrieve identity exposure detections with novel-only filtering and malware family attribution.
- Credentials
  - [Search](https://docs.recordedfuture.com/reference/identity-search.md): Find compromised identities across breach data and stealer logs for one or more domains.
  - [Lookup](https://docs.recordedfuture.com/reference/identity-lookup.md): Retrieve full exposure history for specific email addresses, usernames, or credential hashes.
  - [Lookup passwords for exposure](https://docs.recordedfuture.com/reference/identity-password.md): Checks if specified passwords were exposed.
  - [Hostname Lookup](https://docs.recordedfuture.com/reference/identity-hostname.md): Find credentials compromised from a specific hostname (e.g., internal servers, VPN endpoints).
  - [IP Lookup](https://docs.recordedfuture.com/reference/identity-ip.md): Find credentials compromised from a specific IP address or IP range.
  - [Incident Report](https://docs.recordedfuture.com/reference/identity-incident-report.md): Get a detailed exposure incident report for a single malware log, including compromised credentials, device details, and malware attribution.
  - [Dump Metadata Search](https://docs.recordedfuture.com/reference/identity-dump-metadata.md): Search metadata for data dumps and breach databases by name.