Every API, one clean contract.

Check a username across the public no-session platform stable-set (Maigret/Sherlock surface): per-platform found/not_found/unknown/rate_limited + profile_url + category

{
  "username": "torvalds"
}

Check an email for a linked account on the reliable no-session surface (Gravatar by email-hash); email is hashed locally, never logged/cached

{
  "email": "[email protected]"
}

Check a phone number's no-session messaging-platform footprint (WhatsApp surface); inner-calls phone-validate for E.164 normalization first

{
  "phone": "+14155552671"
}

Aggregate footprint for ANY identifier (auto-detects username/email/phone) → platform_count + category_distribution (no profile content fetched)

{
  "input": "torvalds"
}