Skip to main content
Export saved browser autofill form fields — names, addresses, phone numbers, dates of birth, and similar identity data that browsers store for form-filling. Use to build identity profiles for affected individuals or cross-reference exposed PII against your own customer/employee records.

Request

POST /v1/data/autofill · Required scope: view:autofill (pro and ultra tiers) At least one of name_contains, start_date, or end_date is required.
ParameterTypeRequiredDefaultDescription
name_containsstring | nullOne of name_contains/start_date/end_date requiredCase-insensitive substring match against the autofill field name, e.g. "email", "phone"
start_datestring (date-time) | nullSee aboveInclusive start filter, clamped by query_window_days
end_datestring (date-time) | nullSee aboveInclusive end filter
sort_directionasc | descNodescMust stay constant across pages
cursorstring | nullNoPagination token
limitintegerNo251–500, clamped to your tier’s max_rows

Example request

curl -X POST https://api.vantaprism.me/v1/data/autofill \
  -H "api-key: $VANTAPRISM_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{ "name_contains": "email", "limit": 25 }'

Response

200 OK — array of AutofillRecord, cursor-paginated.
{
  "data": [
    {
      "victim_id": "a3f1c9e8b2d4567890abcdef1234567890abcdef1234567890abcdef123456",
      "browser": "Chrome",
      "profile": "Default",
      "name": "email",
      "value": "john.doe@acme-corp.com",
      "inserted_at": "2026-05-02T14:22:31Z"
    }
  ],
  "nextCursor": null,
  "meta": {
    "request_id": "req_01HZXK3Q7N8YV6F3M2P9JABCDE",
    "took_ms": 33.5,
    "tier": "pro",
    "masked_fields": []
  }
}
FieldDescription
victim_idSHA-256 victim ID — use with Victim Profiles
browserBrowser the value was harvested from
profileBrowser profile name
nameAutofill field name, e.g. "email", "phone", "address_line1"
valueThe stored autofill value. Returned as "[REDACTED]" on free tier
inserted_atWhen the record was ingested

Pagination

Cursor-paginated — see Pagination.

Errors

StatuscodeCause
400VALIDATION_ERRORNone of name_contains, start_date, end_date provided
400INVALID_CURSORTampered or stale cursor
403FORBIDDEN_SCOPEKey lacks view:autofill (free tier)
See Errors for the full catalog.

Tier notes

This endpoint requires view:autofill, which is not included on the free tier — a free-tier key receives 403 FORBIDDEN_SCOPE. Pro and ultra tiers receive value raw; returning a raw value is logged to the api_raw_access audit table.