Find apps that use an organization's brand in app stores

App Store Monitoring searches Google Play and the Apple App Store for app listings that carry a brand name. You give it a term such as Acme. It returns each matching listing with its name, its store and a direct link, so you can review apps that use the brand. In the API reference these endpoints sit under the App Store Search tag. In the dashboard the source is Search by Source → App Store Monitoring. The flow is asynchronous: start a search, poll it until it finishes, then read the listings.

Availability and cost

Availability: the App Store Impersonation plan feature. Not every plan includes it. Manage → Buy more in the dashboard lists the features your plan includes. Plans and quotas explains how plan features work. Cost: no metered allowance. Calls count toward your organization’s per-second rate limit, and every 2xx response to an API-key request uses one unit of your monthly API Calls allowance. A non-2xx response is refunded. Without the feature, or when your license is not active, the four search endpoints (create_, get_, list_ and delete_store_search_request) return 403:

{
  "detail": "This feature is not included in your plan."
}

App Store Impersonation has no allowance and no capacity slots, so these endpoints never return the allowance 429 or the capacity 409. A 429 with "message": "Rate limit exceeded" comes from the rate limit or the API Calls allowance. Rate limits explains both.

What a search matches

A search looks for the term in four places, one after another:

Google Play’s app search, then a web search of play.google.com/store/apps.
The Apple App Store’s app search, then a web search of apps.apple.com.

A listing is kept when the term appears, ignoring case, in the app’s name or description. For web-search hits, the page title or snippet must contain it. Each link is kept once per search.

Send the brand as people would see it. The term is matched as plain text, with no operators or wildcards. Acme matches “Acme Wallet” and “ACME Rewards”. acme.com matches only listings that contain acme.com itself.
A search runs once. It does not refresh. Start a new search to pick up listings published since, or create a monitor.

Run a search

Start the search

create_store_search_request takes one field, search_term: required, 1 to 255 characters.

curl https://client-api.leak.center/api/service/create_store_search_request/ \
  -X POST \
  -H "X-API-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"search_term": "Acme"}'

The call returns 201 with the search:

{
  "id": "5f3a1c20-9b1e-4d8a-bc7e-2a4f1e9c0d11",
  "search_term": "Acme",
  "create_date": "2026-10-08T09:14:02.481203Z",
  "update_date": "2026-10-08T09:14:02.481203Z",
  "is_monitoring": false,
  "alert_cycle": "month",
  "is_email": false,
  "is_reporting": false,
  "status": "in_progress",
  "report_id": null
}

Keep the id. is_monitoring, alert_cycle, is_email, is_reporting and report_id are scheduling fields that a search you start here leaves at their defaults.

Poll until it finishes

Fetch the search with get_store_search_request until status is finished.

curl https://client-api.leak.center/api/service/get_store_search_request/5f3a1c20-9b1e-4d8a-bc7e-2a4f1e9c0d11/ \
  -H "X-API-Key: YOUR_API_KEY"

status takes two values:

in_progress: still running.
finished: done. Read the listings.

There is no failed state. If a store or a web search fails, the search still ends finished, with fewer listings or none. Poll every 10 seconds or slower: each successful poll uses an API call.

Read the listings

list_store_search_result returns the listings of one search. Pass the search id as searchrequest.

curl -G https://client-api.leak.center/api/service/list_store_search_result/ \
  -H "X-API-Key: YOUR_API_KEY" \
  --data-urlencode "searchrequest=5f3a1c20-9b1e-4d8a-bc7e-2a4f1e9c0d11" \
  --data-urlencode "page_size=1000"

Parameter	Type	Notes
`searchrequest`	string	Required. The search `id`.
`page`	integer	1-based. Default `1`.
`page_size`	integer	Default `100`, max `1000`.

There is no filter or sort parameter. Listings come ordered by updated_at, newest first, with listings that have no updated_at at the top.

What comes back

{
  "count": 2,
  "next": null,
  "previous": null,
  "results": [
    {
      "id": "8c1d2e3f-4a5b-4c6d-9e7f-0a1b2c3d4e5f",
      "name": "Acme Wallet - Apps on Google Play",
      "store": "Google",
      "link": "https://play.google.com/store/apps/details?id=com.acmewallet.app",
      "searchrequest": "5f3a1c20-9b1e-4d8a-bc7e-2a4f1e9c0d11",
      "appeared_date": "2026-10-08",
      "updated_at": null
    },
    {
      "id": "2b3c4d5e-6f7a-4b8c-9d0e-1f2a3b4c5d6e",
      "name": "Acme Rewards",
      "store": "Apple",
      "link": "https://apps.apple.com/us/app/acme-rewards/id0000000000",
      "searchrequest": "5f3a1c20-9b1e-4d8a-bc7e-2a4f1e9c0d11",
      "appeared_date": "2026-10-08",
      "updated_at": "20/06/2026, 08:42:11"
    }
  ]
}

The envelope:

count: listings the search found, across all pages.
next / previous: null at either end. The URLs point at the internal search service, not at client-api.leak.center, so don’t call them. Raise page until next is null.

Each listing:

Field	Meaning
`id`	The listing record’s ID. Use it with `delete_store_search_result`.
`name`	The app’s name. For a web-search hit, the page title, such as “Acme Wallet - Apps on Google Play”.
`store`	`Google` for Google Play or `Apple` for the Apple App Store. No other values occur.
`link`	Direct URL of the store listing.
`appeared_date`	The date this search recorded the listing, `YYYY-MM-DD`.
`updated_at`	When the store last updated the app, in UTC. Formatted `DD/MM/YYYY, HH:MM:SS`, not ISO 8601. `null` for web-search hits.
`searchrequest`	The search `id`.

Parse updated_at as day first: 20/06/2026, 08:42:11 is 20 June 2026. The reference schema labels the field date-time, but the value is not ISO 8601.

Manage searches and listings

list_store_search_request lists your organization’s searches, newest first. page_size defaults to 20, max 100. ordering takes create_date, -create_date, update_date or -update_date.
delete_store_search_result removes one listing from a search and returns 204.
delete_store_search_request removes a search and all of its listings and returns 204.

curl -X DELETE https://client-api.leak.center/api/service/delete_store_search_request/5f3a1c20-9b1e-4d8a-bc7e-2a4f1e9c0d11/ \
  -H "X-API-Key: YOUR_API_KEY"

Watch the brand continuously

A search runs once. To re-run a brand on a schedule and receive only new listings, create a monitor on the store source. See Create a monitoring rule. A monitor on this source needs the same App Store Impersonation plan feature. Quick search also runs this source for domain and brand searches. It searches a domain without its top-level domain, so acme.com is searched as acme. On a plan without the feature, quick search reports this source as not_entitled. To find look-alike domains rather than apps, see Domain monitoring.

Errors

Status	When	Body
`400`	`search_term` is missing, blank or over 255 characters	`{"search_term": [...]}` with `This field is required.`, `This field may not be blank.` or `Ensure this field has no more than 255 characters.`
`403`	Your plan lacks App Store Impersonation, or your license is not active	See Availability and cost
`404`	No search or listing with that `id`	—
`404`	`page` is past the last page	`{"detail": "Invalid page."}`
`429`	The per-second rate limit or the monthly API Calls allowance is reached	See Rate limits
`502`	The search service failed	`{"detail": "The requested service is temporarily unavailable."}`
`504`	The search service timed out	`{"detail": "The requested service timed out."}`

Errors lists every error the API returns.

Endpoints

Action	Endpoint
Start a search	`POST /api/service/create_store_search_request/`
Get a search and its status	`GET /api/service/get_store_search_request/{id}/`
List searches	`GET /api/service/list_store_search_request/`
Delete a search and its listings	`DELETE /api/service/delete_store_search_request/{id}/`
List a search’s listings	`GET /api/service/list_store_search_result/`
Delete one listing	`DELETE /api/service/delete_store_search_result/{id}/`

Get started

Search

Leaked credentials

Assess & report

Monitors

Domain monitoring

Downloads & exports

Changelog

Find apps that use an organization's brand in app stores

Availability and cost

What a search matches

Run a search

What comes back

Manage searches and listings

Watch the brand continuously

Errors

Endpoints

​Availability and cost

​What a search matches

​Run a search

​What comes back

​Manage searches and listings

​Watch the brand continuously

​Errors

​Endpoints

Availability and cost

What a search matches

Run a search

What comes back

Manage searches and listings

Watch the brand continuously

Errors

Endpoints