Microsoft Account & Azure AD Tenant Intelligence API

An enterprise-grade OSINT API to verify Microsoft account existence and extract rich organization intelligence (Personal Consumer vs. Managed Azure AD / Microsoft Entra ID classification, tenant type, user display names, and masked phone/email contact pivots) by email address, username, or phone number.

Table of Contents

• Features
• Getting Started
  • 1. Get API Key
  • 2. Base URL & Authentication
• API Endpoints
  • Single Account Check
  • Code Examples
• Response Format
• HTTP Status Codes
• Requirements
• Pricing
• Support
• Legal Compliance

---

Features

✅ Instant Account Verification: Confirm whether a Microsoft account is registered in real time.
✅ Multi-Identifier Input: Accepts email addresses, usernames, and E.164 phone numbers.
✅ Azure AD & Entra ID Classification: Identifies whether the account is Personal (Consumer) or Organization-Managed (Work/School Azure AD).
✅ Deep Metadata Extraction: Returns tenant type, user display names, masked email pivots, and masked phone numbers.
✅ High Performance: Asynchronous architecture with automated proxy rotation and anti-bot bypass.
✅ Developer-Friendly: Available via direct REST API on OSINT Trace (Recommended) and major developer marketplaces.

---

Getting Started

1. Get API Key

• OSINT Trace Direct (Recommended): Create an account on OSINT Trace and generate your API Key from the Workspace Dashboard.
• API.Market: Subscribe via API.Market Microsoft Checker.
• RapidAPI: Subscribe via RapidAPI Microsoft Checker.

2. Base URL & Authentication

Authentication headers and endpoints vary by provider:

Provider	Base URL	Auth Header	Endpoint
OSINT Trace (Direct - Recommended)	https://api.osinttrace.com/v1	x-osint-key: YOUR_OSINT_KEY	POST /check/microsoft
API.Market	https://prod.api.market/api/v1/osint-trace-1/microsoft-checker	X-Api-Key: YOUR_API_KEY	POST /check/microsoft
RapidAPI	https://microsoft-checker.p.rapidapi.com	X-RapidAPI-Key: YOUR_API_KEY X-RapidAPI-Host: microsoft-checker.p.rapidapi.com	POST /check

---

API Endpoints

Single Account Check

Endpoint (OSINT Trace Direct - Recommended):

POST https://api.osinttrace.com/v1/check/microsoft

Request Body:

{
  "input": "target@outlook.com"
}

Code Examples

OSINT Trace Direct API (cURL) — Recommended

curl --request POST \
     --url https://api.osinttrace.com/v1/check/microsoft \
     --header 'x-osint-key: YOUR_OSINT_KEY' \
     --header 'Content-Type: application/json' \
     --data '{"input": "target@outlook.com"}'

API.Market (cURL)

curl --request POST \
     --url https://prod.api.market/api/v1/osint-trace-1/microsoft-checker/check/microsoft \
     --header 'X-Api-Key: YOUR_API_KEY' \
     --header 'Content-Type: application/json' \
     --data '{"input": "target@outlook.com"}'

RapidAPI (cURL)

curl --request POST \
     --url https://microsoft-checker.p.rapidapi.com/check \
     --header 'X-RapidAPI-Host: microsoft-checker.p.rapidapi.com' \
     --header 'X-RapidAPI-Key: YOUR_API_KEY' \
     --header 'Content-Type: application/json' \
     --data '{"input": "target@outlook.com"}'

Additional code snippets for Python, Node.js, Go, PHP, C#, Java, and Shell are available in the examples/ directory.

---

Response Format

Account Found (With Metadata)

{
  "live": true,
  "note": null,
  "metadata": {
    "account_type": "Personal",
    "tenant_type": "Consumer",
    "name": "Jane Doe",
    "masked_phone": "+1 ***-***-1234",
    "masked_email": "j***e@outlook.com",
    "profile_url": null
  }
}

Managed Azure AD Account Found

{
  "live": true,
  "note": null,
  "metadata": {
    "account_type": "Work/School",
    "tenant_type": "Managed",
    "name": null,
    "masked_phone": null,
    "masked_email": null,
    "profile_url": null
  }
}

Account Not Found

{
  "live": false,
  "note": null,
  "metadata": null
}

---

HTTP Status Codes

Status Code	Description	Rationale
200 OK	Success	Query processed and presence/metadata returned.
400 Bad Request	Validation Error	Malformed request body or input under minimum length.
401 Unauthorized	Authentication Required	Missing, invalid, or expired API key header.
403 Forbidden	Quota / Subscription Error	Quota balance exhausted or subscription inactive.
408 Request Timeout	Timeout	Upstream verification exceeded maximum execution window.
429 Too Many Requests	Rate Limit Exceeded	Exceeded 1 request/second limit.

---

Requirements

• Minimum input length: 3 characters
• Supported input formats:
  • Email addresses (user@outlook.com, user@hotmail.com, user@live.com, user@custom-corp.com)
  • Phone numbers (E.164 standard: +1234567890)
  • Usernames / aliases (john_doe)
• Rate Limit: 1 request per second per active API key.

---

Pricing

• Direct Plans (Recommended): Flexible subscription tiers and bulk volume pricing available on OSINT Trace Pricing.
• Marketplace Plans: Subscriptions also available through API.Market and RapidAPI.
• Free Tier: Free tier available for evaluation and testing.

---

Support

For technical inquiries, enterprise SLA plans, or integration assistance:
📧 Email: support@osinttrace.com
🌐 Website: osinttrace.com

---

Legal Compliance

This API is designed for legitimate cybersecurity investigation, fraud prevention, compliance auditing, and threat intelligence. Users must:

• Comply with applicable local and international data protection regulations (e.g., GDPR, CCPA).
• Adhere to Microsoft's Terms of Use and acceptable use policies.
• Ensure lawful basis for investigative data processing.

This service is independently operated by OSINT Trace and is not affiliated with or endorsed by Microsoft Corporation.