> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tracecat.com/llms.txt
> Use this file to discover all available pages before exploring further.

# DeHashed

> Reference for the Tracecat DeHashed integration: registered actions, required secrets, expected inputs, and example workflow usage.

## Check password hash

Action ID: `tools.dehashed.check_password_hash`

Check a password hash. Calls POST /v2/search-password directly with a SHA-256 password hash.

Reference: [https://app.dehashed.com/documentation/api](https://app.dehashed.com/documentation/api)

### Secrets

Required secrets:

* `dehashed`: required values `DEHASHED_API_KEY`.

### Input fields

<ParamField path="sha256_hashed_password" type="string" required>
  SHA-256 hash of the password to check.
</ParamField>

<ParamField path="base_url" type="string | null">
  Base URL of the DeHashed API.

  Default: `null`.
</ParamField>

## List data wells

Action ID: `tools.dehashed.list_data_wells`

List data wells. Calls GET /data-wells directly. This endpoint does not require an API key.

Reference: [https://app.dehashed.com/documentation/api](https://app.dehashed.com/documentation/api)

### Input fields

<ParamField path="base_url" type="string | null">
  Base URL of the DeHashed API.

  Default: `null`.
</ParamField>

<ParamField path="count" type="integer | null">
  Number of data wells to return. DeHashed supports 20 or 50.

  Default: `20`.
</ParamField>

<ParamField path="page" type="integer | null">
  Result page number. Must be 1 or greater.

  Default: `1`.
</ParamField>

<ParamField path="sort" type="string | null">
  Sort by added, name, date, or records. Append -ASC or -DESC for direction.

  Default: `null`.
</ParamField>

## Search breaches

Action ID: `tools.dehashed.search_breaches`

Search breaches. Calls POST /v2/search directly with a DeHashed API-native payload.

Reference: [https://app.dehashed.com/documentation/api](https://app.dehashed.com/documentation/api)

### Secrets

Required secrets:

* `dehashed`: required values `DEHASHED_API_KEY`.

### Input fields

<ParamField path="query" type="string" required>
  DeHashed search query. Use DeHashed search syntax, such as email:"[user@example.com](mailto:user@example.com)", username:"someuser", or a bare quoted value to match across fields.
</ParamField>

<ParamField path="base_url" type="string | null">
  Base URL of the DeHashed API.

  Default: `null`.
</ParamField>

<ParamField path="de_dupe" type="boolean">
  Whether DeHashed should remove duplicate results.

  Default: `false`.
</ParamField>

<ParamField path="page" type="integer">
  Result page number. Must be 1 or greater.

  Default: `1`.
</ParamField>

<ParamField path="regex" type="boolean">
  Whether to use regex matching. Cannot be true when wildcard is true.

  Default: `false`.
</ParamField>

<ParamField path="size" type="integer">
  Results per page. Must be between 1 and 10000.

  Default: `100`.
</ParamField>

<ParamField path="wildcard" type="boolean">
  Whether to use wildcard matching. Cannot be true when regex is true.

  Default: `false`.
</ParamField>