Offendersearch API

Offendersearch API Keys API

The Keys API from Offendersearch API — 3 operation(s) for keys.

Documentation GitHub OpenAPI

Operations 4

GET /v1/keys List API keys for the account (session) #

POST /v1/keys Create an API key (secret shown once) #

POST /v1/keys/{keyId}/rotate Rotate an API key (new secret shown once) #

DELETE /v1/keys/{keyId} Revoke an API key #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/offendersearch-api-keys-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: Offendersearch Keys API
  version: 1.0.0
  description: National sex-offender search across all US states and territories, unified behind one API.
servers:
- url: https://api.offendersearch.app
security:
- ApiKeyAuth: []
tags:
- name: Keys
paths:
  /v1/keys:
    get:
      operationId: listKeys
      summary: List API keys for the account (session)
      security:
      - BearerAuth: []
      responses:
        '200':
          description: The account's API keys (masked; secrets are never re-shown).
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/ApiKey'
        '401':
          $ref: '#/components/responses/Unauthorized'
      tags:
      - Keys
    post:
      operationId: createKey
      summary: Create an API key (secret shown once)
      security:
      - BearerAuth: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateKeyBody'
      responses:
        '201':
          description: Key created. `secret` is returned ONCE here; only its hash is stored.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiKeyWithSecret'
        '401':
          $ref: '#/components/responses/Unauthorized'
      tags:
      - Keys
  /v1/keys/{keyId}/rotate:
    post:
      operationId: rotateKey
      summary: Rotate an API key (new secret shown once)
      security:
      - BearerAuth: []
      parameters:
      - name: keyId
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Rotated key; new `secret` returned once.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ApiKeyWithSecret'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          description: Key not found or revoked.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      tags:
      - Keys
  /v1/keys/{keyId}:
    delete:
      operationId: deleteKey
      summary: Revoke an API key
      security:
      - BearerAuth: []
      parameters:
      - name: keyId
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: Key revoked.
          content:
            application/json:
              schema:
                type: object
                properties:
                  status:
                    type: string
                    enum:
                    - revoked
                  id:
                    type: string
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          description: Key not found.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      tags:
      - Keys
components:
  responses:
    Unauthorized:
      description: Missing or invalid credential.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
  schemas:
    Error:
      type: object
      description: Standard FastAPI error body.
      properties:
        detail:
          type: string
          description: Human-readable error message.
          example: Missing or invalid API key. Send it in the X-API-Key header.
    ApiKey:
      type: object
      properties:
        id:
          type: string
        name:
          type: string
        maskedKey:
          type: string
          description: Prefix + ellipsis; the full secret is never re-shown.
        createdAt:
          type: string
          format: date-time
        lastUsedAt:
          type: string
          format: date-time
          nullable: true
        status:
          type: string
          enum:
          - active
          - revoked
        scopes:
          type: object
          properties:
            freshness:
              type: array
              items:
                type: string
                enum:
                - standard
                - weekly
                - daily
            proof:
              type: boolean
    CreateKeyBody:
      type: object
      properties:
        name:
          type: string
          default: Untitled key
        freshness:
          type: array
          items:
            type: string
            enum:
            - standard
            - weekly
            - daily
          nullable: true
          description: LEGACY/UNENFORCED. Freshness is a PER-REQUEST parameter on /v1/search and is NOT provisioned on the key — any valid key may send `daily` or `weekly` and is billed accordingly. This field is retained for compatibility and does not gate anything.
        proof:
          type: boolean
          nullable: true
          description: Whether the key may request proof docs. Defaults true.
    ApiKeyWithSecret:
      allOf:
      - $ref: '#/components/schemas/ApiKey'
      - type: object
        properties:
          secret:
            type: string
            description: Full key secret — returned ONCE on create/rotate; only its hash is stored.
  securitySchemes:
    ApiKeyAuth:
      type: apiKey
      in: header
      name: X-API-Key
      description: Customer API key. Primary auth for search/records/compat/proof.
    BearerAuth:
      type: http
      scheme: bearer
      description: 'Signed session token (HMAC-SHA256). Auth for account/dashboard endpoints; also accepted by POST /v1/search and the compat endpoint.

        '
    QueryKeyAuth:
      type: apiKey
      in: query
      name: key
      description: API key passed as `?key=` — offenders.io demo mode (compat endpoint only).
    AdminAuth:
      type: apiKey
      in: header
      name: X-Admin-Key
      description: Internal admin credential — separate from customer API keys.