hashlookup CIRCL API

circl · Security

Security No Auth Free & Open security

![](https://www.circl.lu/assets/images/circl-logo.png) [CIRCL hash lookup](https://hashlookup.circl.lu/) is a public API to lookup hash values against known database of files. For more details about all the datasets included [visit the website of the project](https://www.circl.lu/services/hashlookup/). The API is accessible via HTTP ReST API and the API is also [described as an OpenAPI](https://hashlookup.circl.lu/swagger.json). A [documentation is available with](https://www.circl.lu/services/h

Authentication

No authentication requiredFree to use with no key needed.

Sample Requests

GET get_info

Info about the hashlookup database

https://api.apis.guru/v2/specs/circl.lu/hashlookup/1.2/info

Hover any highlighted part to learn what it does

curl -X GET "https://api.apis.guru/v2/specs/circl.lu/hashlookup/1.2/info"

import requests
response = requests.get(
    "https://api.apis.guru/v2/specs/circl.lu/hashlookup/1.2/info",
)
print(response.json())

const url = 'https://api.apis.guru/v2/specs/circl.lu/hashlookup/1.2/info';

const response = await fetch(url); 
const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
)

func main() {
	targetURL := "https://api.apis.guru/v2/specs/circl.lu/hashlookup/1.2/info"
	req, _ := http.NewRequest("GET", targetURL, nil)

	client := &http.Client{}
	resp, _ := client.Do(req)
	defer resp.Body.Close()
	body, _ := io.ReadAll(resp.Body)
	fmt.Println(string(body))
}

require "net/http"
require "json"

uri = URI("https://api.apis.guru/v2/specs/circl.lu/hashlookup/1.2/info")

http = Net::HTTP.new(uri.host, uri.port)
http.use_ssl = uri.scheme == "https"

req = Net::HTTP::Get.new(uri)

res = http.request(req)
puts JSON.parse(res.body)

<?php
$url = "https://api.apis.guru/v2/specs/circl.lu/hashlookup/1.2/info";
$opts = ["http" => [
    "method" => "GET",
]];
$ctx = stream_context_create($opts);
$res = file_get_contents($url, false, $ctx);
print_r(json_decode($res, true));

GET get_stattop

Return the top 100 of most queried values.

https://api.apis.guru/v2/specs/circl.lu/hashlookup/1.2/stats/top

Hover any highlighted part to learn what it does

curl -X GET "https://api.apis.guru/v2/specs/circl.lu/hashlookup/1.2/stats/top"

import requests
response = requests.get(
    "https://api.apis.guru/v2/specs/circl.lu/hashlookup/1.2/stats/top",
)
print(response.json())

const url = 'https://api.apis.guru/v2/specs/circl.lu/hashlookup/1.2/stats/top';

const response = await fetch(url); 
const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
)

func main() {
	targetURL := "https://api.apis.guru/v2/specs/circl.lu/hashlookup/1.2/stats/top"
	req, _ := http.NewRequest("GET", targetURL, nil)

	client := &http.Client{}
	resp, _ := client.Do(req)
	defer resp.Body.Close()
	body, _ := io.ReadAll(resp.Body)
	fmt.Println(string(body))
}

require "net/http"
require "json"

uri = URI("https://api.apis.guru/v2/specs/circl.lu/hashlookup/1.2/stats/top")

http = Net::HTTP.new(uri.host, uri.port)
http.use_ssl = uri.scheme == "https"

req = Net::HTTP::Get.new(uri)

res = http.request(req)
puts JSON.parse(res.body)

<?php
$url = "https://api.apis.guru/v2/specs/circl.lu/hashlookup/1.2/stats/top";
$opts = ["http" => [
    "method" => "GET",
]];
$ctx = stream_context_create($opts);
$res = file_get_contents($url, false, $ctx);
print_r(json_decode($res, true));

GET get_lookup_md5

Lookup MD5.

https://api.apis.guru/v2/specs/circl.lu/hashlookup/1.2/lookup/md5/{md5}

Hover any highlighted part to learn what it does

curl -X GET "https://api.apis.guru/v2/specs/circl.lu/hashlookup/1.2/lookup/md5/{md5}"

import requests
response = requests.get(
    "https://api.apis.guru/v2/specs/circl.lu/hashlookup/1.2/lookup/md5/{md5}",
)
print(response.json())

const url = 'https://api.apis.guru/v2/specs/circl.lu/hashlookup/1.2/lookup/md5/{md5}';

const response = await fetch(url); 
const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
)

func main() {
	targetURL := "https://api.apis.guru/v2/specs/circl.lu/hashlookup/1.2/lookup/md5/{md5}"
	req, _ := http.NewRequest("GET", targetURL, nil)

	client := &http.Client{}
	resp, _ := client.Do(req)
	defer resp.Body.Close()
	body, _ := io.ReadAll(resp.Body)
	fmt.Println(string(body))
}

require "net/http"
require "json"

uri = URI("https://api.apis.guru/v2/specs/circl.lu/hashlookup/1.2/lookup/md5/{md5}")

http = Net::HTTP.new(uri.host, uri.port)
http.use_ssl = uri.scheme == "https"

req = Net::HTTP::Get.new(uri)

res = http.request(req)
puts JSON.parse(res.body)

<?php
$url = "https://api.apis.guru/v2/specs/circl.lu/hashlookup/1.2/lookup/md5/{md5}";
$opts = ["http" => [
    "method" => "GET",
]];
$ctx = stream_context_create($opts);
$res = file_get_contents($url, false, $ctx);
print_r(json_decode($res, true));

Postman Setup Guide

Get Postman ↗

See official documentation for authentication and setup.

What can you build with hashlookup CIRCL API?

hashlookup CIRCL API is a Security API. Developers commonly use security APIs for:

adding multi-factor authentication to your app
validating identity documents and biometrics
monitoring for data breaches and leaked credentials
running background checks and fraud screening
scanning code and infrastructure for vulnerabilities

No authentication required. This API is open — no signup or key needed. Ideal for quick prototypes and public-facing features. hashlookup CIRCL API is free to use, making it a low-risk choice to experiment with.

New to APIs? Read our beginner's guide · Learn about API keys · What is REST?

Open documentation ↗