> ## Documentation Index
> Fetch the complete documentation index at: https://docs.lusha.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Prospecting Companies
> Search Lusha's company database with firmographic filters - size, revenue, industry, technologies, intent, and signals. Returns paginated, lightweight previews - enrich the returned IDs for full firmographic data.
Prospecting Companies searches Lusha's company database for accounts that match your target market: size, revenue range, industry, sub-industry, technologies, locations, SIC/NAICS codes, buyer intent topics, and signal activity.
The response is a page of lightweight company **previews** - not full firmographic records. Each preview includes an `id`. Pass that `id` to [Enrich Companies](/api-reference/enrich/enrich-companies) to get the full company profile.
**Prospect, then enrich**
| Step | Endpoint | Purpose |
| ---- | ------------------------------------------------------------------- | --------------------------------------------------------------------- |
| 1 | **POST /v3/companies/prospecting** | Find companies matching your target market; get back previews + `id`s |
| 2 | [POST /v3/companies/enrich](/api-reference/enrich/enrich-companies) | Pass the `id`s from step 1 to get full firmographic data |
## Endpoint
```
POST https://api.lusha.com/v3/companies/prospecting
```
**Authentication:** API key (`api_key` header)
Results are paginated up to 50,000 total.
***
## Request body
Pagination controls.
Page number. Range: `0`–`1000`.
Results per page. Range: `10`–`100`.
Criteria that matching companies must satisfy.
Company names to include.
Company domains to include.
Lusha company IDs to include.
Free-text search across company fields. Max length: `200`.
Geographic filters. Example: `[{ "country": "United States" }]`
Employee count ranges as `{ "min": ..., "max": ... }`. Example: `[{ "min": 1, "max": 1000 }]`
Revenue ranges as `{ "min": ..., "max": ... }`. Example: `[{ "min": 10000000 }]`
Technologies the company uses. Example: `["React", "Node.js"]`
`"or"` or `"and"` - how the `technologies` list is combined.
Main industry IDs. Example: `[1, 5]`
Sub-industry IDs.
Buyer intent topics. Example: `["Cloud Migration"]`
`"or"` or `"and"` - how the `intentTopics` list is combined.
Ranges (`{ "min": ..., "max": ... }`) on the number of matched intent topics.
SIC industry classification codes.
NAICS industry classification codes.
Filter companies that have a signal of the specified types.
Signal types to match. Example: `["headcountIncrease3m", "surgeInHiring"]`
Earliest signal date, in `YYYY-MM-DD` format.
Restrict signal matching to specific locations. Each object has `country`, `state`, and `startDate`.
Restrict signal matching to specific departments. Each object requires `department` (example: `"Engineering & Technical"`) and accepts an optional `startDate`.
Founding year ranges as `{ "min": ..., "max": ... }`. Example: `[{ "min": 1990, "max": 2020 }]`
Allowed values: `B2B`, `B2C`, `B2G`.
Allowed values: `Government`, `Private Company`, `Public Company`, `Educational`, `Non Profit`, `Self Employed`.
Company LinkedIn URLs. Example: `["https://www.linkedin.com/company/microsoft"]`
Free-text keywords. Example: `["cloud", "artificial intelligence"]`
Same fields as `include`. Companies matching this criteria are removed from results. Example: `{ "domains": ["competitor.com"] }`
When `true`, includes companies with incomplete data in results.
Use the [Company filter types](/api-reference/filters/company-filter-types) and [Company filter values](/api-reference/filters/company-filter-values) endpoints to look up valid values (industry IDs, SIC/NAICS codes, intent topics, and more) before building a request.
***
## Example request
```bash cURL theme={null}
curl --request POST \
--url https://api.lusha.com/v3/companies/prospecting \
--header 'api_key: YOUR_API_KEY' \
--header 'Content-Type: application/json' \
--data '{
"pagination": { "page": 0, "size": 25 },
"filters": {
"companies": {
"include": {
"sizes": [{ "min": 1, "max": 1000 }],
"revenues": [{ "min": 10000000 }],
"locations": [{ "country": "United States" }],
"technologies": ["React", "Node.js"],
"technologiesCondition": "or",
"mainIndustriesIds": [1, 5],
"intentTopics": ["Cloud Migration"]
},
"exclude": {
"domains": ["competitor.com"]
}
}
},
"options": { "includePartialProfiles": false }
}'
```
```json Request body theme={null}
{
"pagination": { "page": 0, "size": 25 },
"filters": {
"companies": {
"include": {
"sizes": [{ "min": 1, "max": 1000 }],
"revenues": [{ "min": 10000000 }],
"locations": [{ "country": "United States" }],
"technologies": ["React", "Node.js"],
"technologiesCondition": "or",
"mainIndustriesIds": [1, 5],
"intentTopics": ["Cloud Migration"]
},
"exclude": {
"domains": ["competitor.com"]
}
}
},
"options": { "includePartialProfiles": false }
}
```
***
## Response
### 200 - Success
Unique ID for this search.
`page`, `size`, and `total` (total matching companies across all pages).
Array of company previews.
Lusha company ID. Pass this to [Enrich Companies](/api-reference/enrich/enrich-companies) to get the full profile.
Echoes back a client-supplied reference ID, if you passed one.
`exact`, and/or `min`/`max` when only a range is known.
`city`, `state`, `country`, `countryIso2`, and `continent`.
`linkedin` company URL.
Fields already populated on this preview. Example: `["alternativeName", "description", "companyType", "employeesByDepartment", "competitors", "emails", "socialLinks"]`
Fields you can reveal via Enrich Companies, each as `{ "field": "emails" | "phones", "credits": }`. `credits` is `0` when your account has already revealed that field for this company.
Signal types detected for this company. Present when signal filtering was requested and matched.
Present only when this item failed. `code` is one of `NOT_FOUND`, `COMPLIANCE_RESTRICTED`, `ENRICH_FAILED`; `message` explains why.
`creditsCharged` and `resultsReturned` for this request.
**Billing:** Prospecting is charged per result via the `api_search` action. If you filter by `signals`, an additional charge applies per matched signal per result.
***
## Error codes
| Status | Meaning |
| ------ | ------------------------------------------------------- |
| `400` | Bad request - invalid input data. |
| `401` | Unauthorized - invalid or missing API key. |
| `402` | Payment required - insufficient credits. |
| `403` | Forbidden - account inactive, or V3 access not enabled. |
| `429` | Too many requests - rate limit exceeded. |
```json 200 theme={null}
{
"requestId": "5ad275c8-7dd4-462a-bd45-6bc1970da64e",
"pagination": { "page": 0, "size": 25, "total": 874 },
"results": [
{
"id": "16303253",
"name": "Lusha",
"domain": "www.lusha.com",
"employeeCount": { "min": 201, "max": 500 },
"industry": "Technology, Information & Media",
"location": {
"city": "London",
"state": "England",
"country": "United Kingdom",
"countryIso2": "GB",
"continent": "Europe"
},
"socialLinks": {
"linkedin": "https://www.linkedin.com/company/lushadata"
},
"has": ["alternativeName", "description", "companyType", "emails", "socialLinks"],
"canReveal": [
{ "field": "emails", "credits": 1 }
]
}
],
"billing": {
"creditsCharged": 1,
"resultsReturned": 1
}
}
```
```json 400 theme={null}
{
"statusCode": 400,
"message": "Invalid request parameters"
}
```
```json 403 theme={null}
{
"statusCode": 403,
"message": "Your account is not active. Please reach out to support at support@lusha.com"
}
```
## OpenAPI
````yaml post /v3/companies/prospecting
openapi: 3.0.3
info:
title: Lusha API Documentation
version: 0.0.1
x-logo:
url: https://www.lusha.com/logo.png
license:
name: Proprietary
url: https://lusha.com/legal/terms
description: >
**This is the Lusha API V3 documentation.**
V3 introduces a new search-then-enrich pattern, bulk operations, AI-powered lookalikes, and richer filter capabilities. All endpoints are under `https://api.lusha.com/v3/`.
For more information on V3, refer to the [Migration Guide](/tutorials/v3-migration-guide).
---
Lusha provides a RESTful API for querying a comprehensive dataset of
business profiles and company information. Built for teams running
prospecting, enrichment, automation, and analytics workflows that need
accurate, continuously updated business data. The API supports both
real-time and bulk use cases.
Use the Lusha API to **search for new prospects**, **enrich existing
records**, **react to real-world changes**, and **expand coverage** with
AI-powered lookalike recommendations.
> All API requests must be made over **HTTPS**. All responses are returned
in **JSON** format.
---
## Available Endpoints
| Category | Description |
|---|---|
| [**Search**](#tag/Search) | Find contacts or companies using known
identifiers |
| [**Enrich**](#tag/Enrich) | Retrieve full profile data for contacts or
companies by ID |
| [**Search & Enrich**](#tag/Search-and-Enrich) | Find and retrieve full
contact or company data in a single call |
| [**Prospecting**](#tag/Prospecting) | Filter-based search across contacts
and companies |
| [**Lookalikes**](#tag/Lookalikes) | AI-powered recommendations for similar
contacts and companies |
| [**Buying Group**](#tag/Buying-Group) | Identify decision makers,
champions, and end users within target accounts |
| [**Contacts Tables**](#tag/Contacts-Tables) | Persist, organize, and
enrich contacts in reusable tables |
| [**Companies Tables**](#tag/Companies-Tables) | Persist, organize, and
enrich companies in reusable tables |
| [**Signals**](#tag/Signals) | Real-world activity data for contacts and
companies |
| [**Website Visitors**](#tag/Website-Visits) | Companies ranked by
website-visit signals for your tracked domains |
| [**Conversations**](#tag/Conversations) | Search recorded sales
conversations and fetch their transcripts |
| [**Filters**](#tag/Filters) | Discover valid filter values for prospecting
|
| [**Webhooks**](#tag/Webhooks) | Real-time signal notifications via HTTP
callbacks |
| [**Account**](#tag/Account) | Usage, credits, rate limits, and pricing |
**Waterfall Reveal for Contact Enrichment.**
Enrich Contacts now supports `waterfallEnabled`. Fall through to your enabled third-party providers when Lusha's own data has no match, for extra reach on hard-to-match contacts. On by default once your account has it turned on - pass `waterfallEnabled: false` to opt a specific call out. [See Enrich Contacts](#operation/enrichContacts).
---
## Data Source and Privacy
**Lusha is a search platform.** The data provided is not created or directly
managed by Lusha. It is sourced from publicly available information and
trusted business partners.
For more details on how we collect and handle data, see our [Privacy
Policy](https://lusha.com/legal/privacy-notice/).
---
## Legal Notices
(a) Data brokers and other third-party platforms may not embed, expose, or
otherwise provide access to the Lusha API, or to Data obtained through it,
on or through their own website, product, or service, without Lusha's prior
written consent.
(b) Data obtained through the API may not be used to train or develop AI/ML
systems, subject to the terms and exceptions outlined in the [Terms and
Conditions](https://lusha.com/legal/terms).
---
## Authentication
All API requests require an **API key** linked to your Lusha account and
plan. Pass your key in the `api_key` request header on every call.
> Generate and manage your API key in the [Lusha
dashboard](https://dashboard.lusha.com/enrich/api).
Store your API key securely and use it only in **server-side environments**.
---
## Rate Limiting
Lusha enforces rate limits on a per-plan basis to ensure fair usage and
platform stability. Limits are applied across multiple time windows (per
minute, per hour, and per day), and vary depending on your account plan.
Rate limits for the **Credit Usage API** differ from standard endpoint
limits.
> **Note:** To check your current plan's limits, visit the [Lusha Help
Center](https://info.lusha.com/en/articles/163856-all-there-is-to-know-about-lusha-s-api)
or contact your account manager.
**Rate Limit Response Headers**
| Header | Description |
|--------|-------------|
| `x-rate-limit-daily` | Total requests allowed per day |
| `x-daily-requests-left` | Requests remaining in your daily quota |
| `x-daily-usage` | Requests made in the current daily period |
| `x-rate-limit-hourly` | Total requests allowed per hour |
| `x-hourly-requests-left` | Requests remaining in your hourly quota |
| `x-hourly-usage` | Requests made in the current hourly period |
| `x-rate-limit-minute` | Total requests allowed per minute |
| `x-minute-requests-left` | Requests remaining in the current minute window
|
| `x-minute-usage` | Requests made in the current minute window |
---
## Error Codes
Lusha uses standard HTTP status codes to indicate the result of each
request.
| Code | Name | Description |
|------|------|-------------|
| `200` | OK | Request was successful |
| `400` | Bad Request | Request is malformed or missing required fields |
| `401` | Unauthorized | API key is missing or invalid |
| `402` | Payment Required | Insufficient credits or payment needed |
| `403` | Forbidden | Account is inactive. Contact support@lusha.com |
| `404` | Not Found | Endpoint or resource does not exist |
| `429` | Too Many Requests | Rate limit or daily quota exceeded |
| `451` | Unavailable For Legal Reasons | Request blocked due to GDPR
regulations |
| `499` | Client Closed Request | Request timed out before completing |
| `5XX` | Server Error | Issue on Lusha's end. Retry with exponential
backoff |
**Error Response Format**
```json
{
"statusCode": 400,
"message": "Invalid request parameters"
}
```
**Tables-specific error codes**
| Code | Status | Meaning |
|---|---|---|
| `TABLE_NOT_FOUND` | 404 | The `table_id` does not exist or is not
accessible to this account |
| `COLUMN_NOT_FOUND` | 404 | The `column_id` does not exist on the given
table |
| `TABLE_NAME_CONFLICT` | 409 | A table with this name already exists |
Tables error bodies use the shape `{ "message": "...", "code": , ...
}` rather than the `statusCode`/`errors` shape used elsewhere in this doc.
**Limits:** up to 500 entity IDs per add/remove call · max 50,000 entities
per table · max 500 tables per account · `page` 0–100 · `size` default 100.
**Tips for Handling Errors**
- Verify your API key is correct and active
- Read the `message` field for specific troubleshooting details
- For `429` errors, wait before retrying
- For `5XX` errors, use exponential backoff before retrying
contact:
name: Lusha Support
url: https://api.lusha.com
email: support@lusha.com
termsOfService: https://lusha.com/legal/terms
x-privacy-policy:
name: Privacy Policy
url: https://lusha.com/legal/privacy-notice/
servers:
- url: https://api.lusha.com
description: Production server
security:
- ApiKeyAuth: []
tags:
- name: Search
description: >
**Search APIs:** Find contacts or companies using known identifiers.
Look up contacts by `id`, `linkedinUrl`, `email`, or `firstName` +
`lastName` + `companyName`/`companyDomain`. Look up companies by `id`,
`name`, or `domain`.
Returns a non-PII preview of each profile with a `has` field listing
available data points and a `canReveal` field showing what can be unlocked
via Enrich.
> **Billing:** Charged per successful result via the `api_search` action.
x-tag-expanded: true
- name: Enrich
description: >
**Enrich APIs:** Retrieve full profile data for contacts or companies by
ID.
Pass IDs from Search results to reveal emails, phones, and full
firmographic data.
> **Billing:** Charged per revealed field via per-datapoint pricing
(`revealEmail`, `revealPhone`, `reveal_company`).
x-tag-expanded: true
- name: Search & Enrich
description: >
**Search & Enrich APIs:** Find and retrieve full contact or company data
in a single call.
Combines Search and Enrich into one request. Provide identifiers and
control what gets revealed via the `reveal` field. Premium data points are
never returned unless you request them explicitly in `reveal`.
> **Billing:** Two charges apply - one for the search (`api_search`) and
one per revealed field.
x-tag-expanded: true
- name: Prospecting
description: >
**Prospecting APIs:** Filter-based search for contacts and companies.
Use prospecting to find new records that match your Ideal Customer Profile
(ICP). Apply rich filters across:
- **Contact attributes:** title, seniority, location, signals
- **Company attributes:** size, revenue, industry, technologies, intent
Pass `tableId` to also persist matching results into an existing table.
See [Contacts Tables](#tag/Contacts-Tables) or [Companies
Tables](#tag/Companies-Tables).
> **Billing:** Uses the capture/charge model with `api_search` actions.
Signal charges apply additionally.
x-tag-expanded: true
- name: Lookalikes
description: >
**Lookalike APIs:** Use AI-powered recommendations to discover contacts
and companies similar to your best existing customers. The Contact
Lookalikes and Company Lookalikes endpoints return paginated results you
can pipe directly into Enrich for full data.
Pass `tableId` to also persist matching results into an existing table.
See [Contacts Tables](#tag/Contacts-Tables) or [Companies
Tables](#tag/Companies-Tables).
x-tag-expanded: true
- name: Buying Group
description: >
**Buying Group API:** Identify and prioritize the buying committee within
a set of target companies.
Supply up to 25 companies by `domain` or Lusha company `id`. The model
scores and labels each returned contact with a persona role -
`decision_maker`, `potential_champion`, or `end_user` - so you can
prioritize outreach across the buying committee instead of working one
contact at a time.
Results are lightweight previews grouped by company. Use [Enrich
Contacts](#operation/enrichContacts) with the returned `id` to reveal
emails and phones.
> **Billing:** Charged per contact returned via the `buyingGroupContact`
action.
x-tag-expanded: true
- name: Contacts Tables
description: >
**Contacts Tables API:** Create and manage persistent tables of contacts
inside Lusha.
Tables are spreadsheets with configurable columns - default Lusha fields,
enrichment data, Signals, AI insights, premium data points, CRM fields,
and custom fields. Populate a table directly through the endpoints below,
or pass `tableId` on Prospecting, Enrich, Signals, or Lookalike calls to
persist those results automatically.
Every surface that touches table data - this API, MCP, and the Workspace
UI - reads and writes the same underlying data. Changes made through one
surface are reflected on the others.
**Working with tables:**
- **Tables** - create, list, get status, update
(rename/archive/visibility), delete
- **Entities** - add, remove, or read the rows in a table
- **Columns** - browse the Lusha column catalog, add columns, list,
remove, or run a column across a table's rows
**Owner resolution:** `owner.email` resolves to a user on your account and
determines table ownership. **Required on every call when authenticating
with an API key** - omitting it returns `400`. Optional for OAuth/token
callers, since the caller is already identified by the token. Sent in the
body as `owner: { email }` on `POST`/`PATCH` calls (and on `DELETE
.../entities`, which carries a body); sent as a `?email=` query parameter
on other `GET`/`DELETE` calls, which have no body.
**Billing:**
- Adding contacts to a table is free.
- Reading entities (`GET .../entities`) charges per row returned.
- Create / List / Get / Update / Delete / Column Catalog / Add Columns /
List Columns / Remove Column / Remove Entities are free. (Add Columns is
free today - credits aren't charged for it yet.)
- Running a column charges per row per the column's tier (contact
enrichment per row with data; signal/AI/score per row per run).
- Non-public-API-plan accounts always resolve to `0` credits charged.
**Limits:** up to 500 entity IDs per add/remove call · max 50,000 entities
per table · max 500 tables per account.
See also: [Companies Tables](#tag/Companies-Tables).
x-tag-expanded: true
- name: Companies Tables
description: >
**Companies Tables API:** Create and manage persistent tables of companies
inside Lusha.
Tables are spreadsheets with configurable columns - default Lusha fields,
enrichment data, Signals, AI insights, premium data points, CRM fields,
and custom fields. Populate a table directly through the endpoints below,
or pass `tableId` on Prospecting, Enrich, Signals, or Lookalike calls to
persist those results automatically.
Every surface that touches table data - this API, MCP, and the Workspace
UI - reads and writes the same underlying data. Changes made through one
surface are reflected on the others.
**Working with tables:**
- **Tables** - create, list, get status, update
(rename/archive/visibility), delete
- **Entities** - add, remove, or read the rows in a table
- **Columns** - browse the Lusha column catalog, add columns, list,
remove, or run a column across a table's rows
**Owner resolution:** `owner.email` resolves to a user on your account and
determines table ownership. **Required on every call when authenticating
with an API key** - omitting it returns `400`. Optional for OAuth/token
callers, since the caller is already identified by the token. Sent in the
body as `owner: { email }` on `POST`/`PATCH` calls (and on `DELETE
.../entities`, which carries a body); sent as a `?email=` query parameter
on other `GET`/`DELETE` calls, which have no body.
**Billing:**
- Adding companies to a table charges `reveal_company` per **newly added**
company, deduped so duplicates and already-present companies aren't
charged again.
- Reading entities (`GET .../entities`) charges per row returned.
- Create / List / Get / Update / Delete / Column Catalog / Add Columns /
List Columns / Remove Column / Remove Entities are free. (Add Columns is
free today - credits aren't charged for it yet.)
- Running a column charges per row per the column's tier (company
enrichment once per company per table - re-runs on an already-paid company
are free; signal/AI/score per row per run).
- Non-public-API-plan accounts always resolve to `0` credits charged.
**Limits:** up to 500 entity IDs per add/remove call · max 50,000 entities
per table · max 500 tables per account.
See also: [Contacts Tables](#tag/Contacts-Tables).
x-tag-expanded: true
- name: Signals
description: >
Real-world activity data for contacts and companies.
Signals are available as standalone endpoints or as an optional `signals`
filter on Search and Prospecting endpoints.
**Contact signal types:** `promotion`, `companyChange`, `allSignals`
----
**Company signal types:** `headcountIncrease1m/3m/6m/12m`,
`headcountDecrease1m/3m/6m/12m`, `surgeInHiring`,
`surgeInHiringByDepartment`, `surgeInHiringByLocation`,
`websiteTrafficIncrease`, `websiteTrafficDecrease`, `itSpendIncrease`,
`itSpendDecrease`, `riskNews`, `commercialActivityNews`,
`corporateStrategyNews`, `financialEventsNews`, `peopleNews`,
`marketIntelligenceNews`, `productActivityNews`, `allSignals`
----
**Signal Score:** Use [Score Companies by Signal
Activity](#operation/getCompanySignalScores) or [Score Contacts by Signal
Activity](#operation/getContactSignalScores) to get a single aggregate
momentum score ([0,1]) plus the active signal breakdown for a batch of
entities, rather than a raw event list.
----
Credits are charged per matched signal per result via `showSignalsContact`
or `showSignalsCompany`.
Pass `tableId` to also persist matching results into an existing table.
See [Contacts Tables](#tag/Contacts-Tables) or [Companies
Tables](#tag/Companies-Tables).
x-tag-expanded: true
- name: Website Visits
description: >
Retrieve companies ranked by website-visit signals for your tracked
domains.
Domains must be configured for tracking in the dashboard. Each result combines a V3 company firmographic preview with behavioral visit metrics (score, sessions, unique visitors, avg session length, and more).
x-tag-expanded: true
- name: Conversations
description: >
**Conversations API:** Search the sales conversations recorded by Lusha
Conversations for your account, and fetch speaker-attributed transcripts.
Search Conversations returns each conversation's metadata, AI summary,
action items, risks, objections, competitor mentions, coaching analysis,
and chapters - transcripts are not included. Fetch the transcript for a
single conversation separately.
**Two search modes on one contract:**
- **Keyword mode** - supply `query` to rank conversations by transcript
content. All other filters are ignored.
- **Filter mode** - omit `query` and supply the structural filters (dates,
contact names, company domains, meeting titles).
Only conversations belonging to your account whose post-call processing
has completed are returned. `summary`, `coaching`, and `chapters` come
from an asynchronous pipeline and are `null`/empty until it has run - a
`null` summary means "analysis not ready yet", not "nothing found".
> **Billing:** Search charges 1 credit per block of up to 25 conversations
returned (via `ci_meeting_data_export`); a request that returns nothing is
free. Transcript charges 1 credit per successful request (via
`ci_transcript_analysis`); a `404` is never charged. While the relevant
action isn't yet seeded on your account's pricebook, the endpoint stays
free (`billing.creditsCharged` is `0`).
x-tag-expanded: true
- name: Filters
description: >
**Filter APIs:** Retrieve available filter values for prospecting.
Use the discovery endpoints to list all available filter types, then fetch
valid values for a specific filter type before building a prospecting
request.
**Contact filter types:** `departments`, `seniority`,
`existingDataPoints`, `countries`, `locations`
**Company filter types:** `names`, `sizes`, `revenues`, `locations`,
`sics`, `naics`, `industriesLabels`, `intentTopics`, `technologies`
x-tag-expanded: true
- name: Webhooks
description: >
Subscribe to real-time notifications when contacts change jobs or
companies experience key business events.
Webhooks deliver HTTP POST requests to your endpoints when signals occur -
from promotions and job changes to company growth.
> For a full list of available signals, refer to [**Signal
Options**](https://docs.lusha.com/apis/openapi/signals/getsignaloptions).
---
**Key Features:**
- Real-time contact & company signal notifications
- Bulk subscription management (up to 25 items per request)
- Secure delivery with HMAC-SHA256 signatures
- Delivery monitoring with audit logs
**Available Endpoints:**
| Method | Endpoint | Purpose |
|--------|----------|---------|
| POST | `/api/subscriptions` | Create subscriptions (bulk supported) |
| GET | `/api/subscriptions` | List all subscriptions |
| GET | `/api/subscriptions/{id}` | Get subscription by ID |
| PATCH | `/api/subscriptions/{id}` | Update subscription |
| POST | `/api/subscriptions/delete` | Delete subscriptions (bulk
supported) |
| POST | `/api/subscriptions/{id}/test` | Test subscription delivery |
| GET | `/api/audit-logs` | Get webhook delivery logs |
| GET | `/api/audit-logs/stats` | Get delivery statistics |
| GET | `/api/account/secret` | Get account webhook secret |
| POST | `/api/account/secret/regenerate` | Regenerate account secret |
| POST | `/api/subscriptions/opt-out` | Subscribe to contact opt-out
notifications |
> **Webhook Delivery Acknowledgment:** When receiving webhook deliveries
(POST requests), your endpoint must acknowledge with a specific response
format. See the [Create Subscription](#operation/createSubscription)
endpoint for the required acknowledgment structure.
---
Rate Limits
| Operation | Limit |
|-----------|-------|
| API Requests | 100 requests/minute per account |
| Create Subscriptions | 25 items per request |
| Delete Subscriptions | 25 items per request |
---
Security & Verification
**HTTPS Requirement:**
- Production webhook URLs **must** use HTTPS
- HTTP URLs are not accepted
**Signature Verification:**
All webhook deliveries include an `X-Lusha-Signature` header containing an
HMAC-SHA256 signature. Verify this signature to ensure the request is from
Lusha:
1. Extract the `X-Lusha-Signature` and `X-Lusha-Timestamp` headers
2. Concatenate: `timestamp + "." + JSON.stringify(payload)`
3. Compute HMAC-SHA256 using your webhook secret
4. Compare the computed signature with the received signature
**Example (Node.js):**
```javascript
const crypto = require('crypto');
function verifySignature(payload, signature, timestamp, secret) {
const signedPayload = `${timestamp}.${JSON.stringify(payload)}`;
const expectedSignature = crypto
.createHmac('sha256', secret)
.update(signedPayload)
.digest('hex');
return crypto.timingSafeEqual(
Buffer.from(signature),
Buffer.from(expectedSignature)
);
}
```
> **Security Best Practice:** Always verify webhook signatures to prevent
spoofed requests.
---
Credits & Billing
**Credit Charges:**
- Credits are charged when signals are detected and delivered to your
webhook
- The `creditsCharged` field in the webhook payload indicates how many
credits were used
- Credits are deducted from your account balance per signal type
**No Duplicate Charges:**
- Each signal is delivered once and charged once
- Webhook delivery retries do not incur additional charges
---
Error Response Format
All error responses follow this format:
```json
{
"statusCode": 400,
"message": "Validation failed",
"errors": ["entityType must be one of: contact, company"]
}
```
| Field | Type | Description |
|-------|------|-------------|
| `statusCode` | number | HTTP status code |
| `message` | string | Error message |
| `errors` | string[] | Detailed error messages (optional) |
---
x-tag-expanded: true
- name: Account
description: >
**Account API:** Retrieve account usage, credit balance, rate limits, plan
details, and pricing.
Use this endpoint to monitor consumption and understand the credit cost of
each action type in the public API flow.
> **Rate limit:** 5 requests per minute.
x-tag-expanded: true
paths:
/v3/companies/prospecting:
post:
tags:
- Prospecting
summary: Prospecting Companies
description: >
Search for companies that match your target market using rich filter
criteria.
**Filter by:**
- Size, revenue range, industry, sub-industry
- Technologies in use
- Locations (HQ country, state, city)
- SIC and NAICS codes
- Buyer intent topics
- Signal activity (headcount changes, hiring surges, news events,
LinkedIn activity intent)
Use the returned company `id` values with Enrich Companies to get full
firmographic data.
> **Billing:** Charged per result via `api_search`. If signals are
requested, an additional charge applies per matched signal per result.
> **Persisting to a table:** Pass `tableId` to also persist matching
results into an existing table. This is additive - the primary response
is unchanged, and a `tableWrite` object is added showing what happened
on the table side. See [Companies Tables](#tag/Companies-Tables).
operationId: prospectingCompanies
requestBody:
required: true
content:
application/json:
schema:
$ref: '#/components/schemas/V3ProspectingCompaniesRequest'
example:
pagination:
page: 0
size: 25
filters:
companies:
include:
sizes:
- min: 1
max: 1000
revenues:
- min: 10000000
locations:
- country: United States
technologies:
- React
- Node.js
technologiesCondition: or
mainIndustriesIds:
- 1
- 5
intentTopics:
- Cloud Migration
foundedYear:
- min: 1990
max: 2020
businessModel:
- B2B
- B2G
companyType:
- Public Company
- Private Company
linkedinUrls:
- https://www.linkedin.com/company/microsoft
keywords:
- cloud
- artificial intelligence
signals:
types:
- headcountIncrease3m
- surgeInHiring
startDate: '2025-01-01'
exclude:
domains:
- competitor.com
businessModel:
- B2C
companyType:
- Non Profit
keywords:
- staffing
tableId: '583021'
options:
includePartialProfiles: false
responses:
'200':
description: Successful response
content:
application/json:
schema:
$ref: '#/components/schemas/V3ProspectingCompaniesResponse'
example:
requestId: f6a7b8c9-d0e1-2345-fabc-678901234567
results:
- id: '16303253'
name: Lusha
domain: lusha.com
pagination:
page: 0
size: 25
total: 87
tableWrite:
tableId: '583021'
added: 1
alreadyPresent: 0
columnsCreated: []
rowsProcessed: 1
rowsCharged: 1
rowsAlreadyPaidInTable: 0
billing:
creditsCharged: 1
resultsReturned: 1
'400':
$ref: '#/components/responses/BadRequest'
'401':
$ref: '#/components/responses/Unauthorized'
'402':
$ref: '#/components/responses/PaymentRequired'
'403':
$ref: '#/components/responses/Forbidden'
'429':
$ref: '#/components/responses/TooManyRequests'
components:
schemas:
V3ProspectingCompaniesRequest:
type: object
required:
- pagination
- filters
properties:
pagination:
$ref: '#/components/schemas/V3PaginationRequest'
filters:
type: object
required:
- companies
description: >
`filters.contacts` cannot be combined with company `searchText`,
`signals`, `intent`, or `technologies` on the same request - doing
so returns `400` (contact filters are never silently ignored).
properties:
companies:
type: object
required:
- include
properties:
include:
$ref: '#/components/schemas/V3CompanyProspectingFilters'
exclude:
$ref: '#/components/schemas/V3CompanyProspectingFilters'
contacts:
type: object
properties:
include:
$ref: '#/components/schemas/V3ContactsOnCompanySearchFilters'
exclude:
$ref: '#/components/schemas/V3ContactsOnCompanySearchFilters'
tableId:
type: string
description: >-
Optional. If provided, results are also persisted to this table. See
the Tables API.
example: '583021'
options:
type: object
properties:
includePartialProfiles:
type: boolean
default: false
V3ProspectingCompaniesResponse:
type: object
properties:
requestId:
type: string
format: uuid
results:
type: array
items:
$ref: '#/components/schemas/V3CompanyPreview'
pagination:
$ref: '#/components/schemas/V3PaginationResponse'
tableWrite:
$ref: '#/components/schemas/TableWrite'
billing:
$ref: '#/components/schemas/V3Billing'
V3PaginationRequest:
type: object
required:
- page
- size
properties:
page:
type: integer
minimum: 0
maximum: 1000
default: 0
example: 0
size:
type: integer
minimum: 10
maximum: 100
default: 25
example: 25
V3CompanyProspectingFilters:
type: object
properties:
names:
type: array
items:
type: string
domains:
type: array
items:
type: string
ids:
type: array
items:
type: string
searchText:
type: string
maxLength: 200
locations:
type: array
items:
$ref: '#/components/schemas/V3Location'
sizes:
type: array
items:
$ref: '#/components/schemas/V3Range'
revenues:
type: array
items:
$ref: '#/components/schemas/V3Range'
technologies:
type: array
items:
type: string
technologiesCondition:
type: string
enum:
- or
- and
mainIndustriesIds:
type: array
items:
type: integer
subIndustriesIds:
type: array
items:
type: integer
intentTopics:
type: array
items:
type: string
intentTopicsCondition:
type: string
enum:
- or
- and
intentMinScore:
type: integer
minimum: 1
maximum: 100
intentMaxScore:
type: integer
minimum: 1
maximum: 100
intentTopicsOperator:
type: string
enum:
- or
- and
- any
- all
description: >
Recommended over `intentTopicsCondition`. `any`/`all` are aliases
for `or`/`and`. `intentTopicsCondition` is not deprecated and
remains accepted.
topicCountThreshold:
type: array
items:
$ref: '#/components/schemas/V3Range'
sicCodes:
type: array
items:
type: string
naicsCodes:
type: array
items:
type: string
signals:
type: object
properties:
types:
type: array
items:
type: string
example:
- headcountIncrease3m
- surgeInHiring
- linkedinActivityIntent
startDate:
type: string
format: date
filterByLocation:
type: array
items:
type: object
properties:
country:
type: string
state:
type: string
startDate:
type: string
format: date
filterByDepartment:
type: array
items:
type: object
required:
- department
properties:
department:
type: string
example: Engineering & Technical
startDate:
type: string
format: date
filterByIntentCategory:
type: array
items:
type: string
description: >
Refines linkedinActivityIntent results by Bombora intent
category. Applied only when linkedinActivityIntent is present in
`types` (or selected via allSignals). Omit to match all
categories. See GET
/v3/companies/signals/filters/intentCategories for the full list
of valid values.
example:
- Technology
foundedYear:
type: array
description: >-
Filter by year the company was founded. Supports `min` (greater than
or equal) and `max` (less than or equal) range operators.
items:
type: object
properties:
min:
type: integer
example: 1990
max:
type: integer
example: 2020
businessModel:
type: array
description: 'Filter by business model. Accepted values: B2B, B2C, B2G.'
items:
type: string
enum:
- B2B
- B2C
- B2G
example:
- B2B
- B2G
companyType:
type: array
description: >-
Filter by company type. Accepted values: Government, Private
Company, Public Company, Educational, Non Profit, Self Employed.
items:
type: string
enum:
- Government
- Private Company
- Public Company
- Educational
- Non Profit
- Self Employed
example:
- Public Company
- Private Company
linkedinUrls:
type: array
description: Filter by company LinkedIn URLs.
items:
type: string
example:
- https://www.linkedin.com/company/microsoft
keywords:
type: array
description: Filter by keywords associated with the company.
items:
type: string
example:
- cloud
- artificial intelligence
specialities:
type: array
items:
type: string
exactSpecialities:
type: array
items:
type: string
exactKeywords:
type: array
items:
type: string
keywordsSearchFields:
type: array
items:
type: string
previousCompanyDomains:
type: array
items:
type: string
previousCompanyNames:
type: array
items:
type: string
geographicDetails:
type: array
items:
type: object
properties:
country:
type: string
zipcode:
type: string
distance:
type: integer
description: Radius in miles.
locationsZipcodes:
type: array
items:
type: object
properties:
countryIso2:
type: string
zipcode:
type: string
headquarterZipcodes:
type: array
items:
type: object
properties:
countryIso2:
type: string
zipcode:
type: string
V3ContactsOnCompanySearchFilters:
type: object
description: >-
Restricted contact-attribute filters usable within a company prospecting
request.
properties:
jobTitles:
type: array
items:
type: string
departments:
type: array
items:
type: string
seniorityIds:
type: array
items:
type: integer
skills:
type: array
items:
type: string
locations:
type: array
items:
$ref: '#/components/schemas/V3Location'
existingDataPoints:
type: array
items:
type: string
V3CompanyPreview:
type: object
properties:
clientReferenceId:
type: string
example: comp-ref-1
id:
type: string
example: '16303253'
name:
type: string
example: Lusha
domain:
type: string
example: www.lusha.com
employeeCount:
type: object
properties:
exact:
type: integer
example: 364
min:
type: integer
example: 201
max:
type: integer
example: 500
industry:
type: string
example: Technology, Information & Media
location:
type: object
properties:
city:
type: string
example: London
state:
type: string
example: England
stateCode:
type: string
description: Free field. ISO/postal state or region code, when available.
example: MA
country:
type: string
example: United Kingdom
countryIso2:
type: string
example: GB
continent:
type: string
example: Europe
socialLinks:
type: object
properties:
linkedin:
type: string
example: https://www.linkedin.com/company/lushadata
has:
type: array
items:
type: string
description: >
Available data points that can be revealed via Enrich Companies.
Includes base firmographic fields plus new revealable fields:
employeesByDepartment, employeesByLocation, employeesBySeniority,
competitors, businessModel, phones, emails, keywords, socialLinks,
estimatedAnnualItSpend, monthlyWebsiteTraffic, openJobs,
directParent, ultimateParent.
example:
- alternativeName
- alternativeDomains
- description
- companyType
- yearFounded
- subIndustry
- specialities
- sicCodes
- naicsCodes
- additionalLocations
- linkedinFollowers
- popularityTier
- logoUrl
- employeesByDepartment
- employeesByLocation
- employeesBySeniority
- competitors
- businessModel
- phones
- emails
- keywords
- socialLinks
- estimatedAnnualItSpend
- monthlyWebsiteTraffic
- openJobs
- directParent
- ultimateParent
canReveal:
type: array
description: >
Data fields that can be revealed via Enrich Companies, with the
credit cost per field. A cost of 0 means the field has already been
revealed for this account.
items:
$ref: '#/components/schemas/V3CanRevealItem'
example:
- field: employeesByDepartment
credits: 1
- field: employeesByLocation
credits: 1
- field: employeesBySeniority
credits: 1
- field: competitors
credits: 1
- field: intent
credits: 0
- field: estimatedAnnualItSpend
credits: 1
- field: monthlyWebsiteTraffic
credits: 1
- field: openJobsTotal
credits: 1
- field: openJobsByDepartment
credits: 1
- field: openJobsByLocation
credits: 1
- field: openJobsBySeniority
credits: 1
- field: directParent
credits: 1
- field: ultimateParent
credits: 1
signalTypes:
type: array
items:
type: string
example:
- headcountIncrease3m
error:
$ref: '#/components/schemas/V3ItemError'
V3PaginationResponse:
type: object
properties:
page:
type: integer
example: 0
size:
type: integer
example: 25
total:
type: integer
TableWrite:
type: object
description: >
Added to a Prospecting, Enrich, Signals, or Lookalike response when
`tableId` is passed on the request. The primary response is unaffected
even if the table write fails.
properties:
tableId:
type: string
example: '482910'
added:
type: integer
description: Number of new entities added to the table by this call.
example: 3
alreadyPresent:
type: integer
description: Number of entities from this call that were already in the table.
example: 2
columnsCreated:
type: integer
description: >-
Number of columns auto-created by this call (e.g. a Signals column
created on first use).
example: 0
rowsProcessed:
type: integer
description: Number of rows the column-run touched as part of this call.
example: 5
rowsCharged:
type: integer
description: Number of those rows that incurred a credit charge.
example: 5
rowsAlreadyPaidInTable:
type: integer
description: >-
Number of those rows that were already paid for in this table and
were not re-charged.
example: 0
creditsCharged:
type: integer
description: Credits charged specifically for this table write.
example: 0
V3Billing:
type: object
description: Credit usage summary for a V3 API request
properties:
creditsCharged:
type: integer
description: Total credits charged for this request
example: 3
resultsReturned:
type: integer
description: Number of successful results returned
example: 1
ErrorResponse:
type: object
required:
- statusCode
- message
properties:
statusCode:
type: integer
description: HTTP status code
example: 400
message:
type: string
description: Error message
example: Validation failed
errors:
type: array
items:
type: string
description: Detailed error messages (optional, only for validation errors)
example:
- 'entityType must be one of: contact, company'
V3Location:
type: object
description: Location filter object used in prospecting requests
properties:
city:
type: string
example: San Francisco
state:
type: string
example: California
country:
type: string
example: United States
continent:
type: string
example: North America
countryGrouping:
type: string
example: EMEA
region:
type: string
example: California
countryIso2:
type: string
example: US
V3Range:
type: object
description: Numeric range filter
properties:
min:
type: integer
minimum: 0
example: 1
max:
type: integer
example: 1000
V3CanRevealItem:
type: object
description: Indicates a data type that can be revealed and its credit cost
properties:
field:
type: string
enum:
- emails
- phones
example: emails
credits:
type: integer
description: Credit cost (0 when already revealed for this account)
example: 1
V3ItemError:
type: object
description: Per-item error in a batch response
properties:
code:
type: string
enum:
- NOT_FOUND
- COMPLIANCE_RESTRICTED
- ENRICH_FAILED
- NO_SCORE
example: NOT_FOUND
message:
type: string
example: Contact not found
responses:
BadRequest:
description: Bad request - invalid input data
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
example:
statusCode: 400
message: Invalid request parameters
Unauthorized:
description: Unauthorized - invalid or missing API key
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
example:
statusCode: 401
message: Invalid API key
PaymentRequired:
description: Payment required - insufficient credits
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
example:
statusCode: 402
message: Insufficient credits for this operation
Forbidden:
description: >-
Forbidden - account inactive, V3 access not enabled, or plan does not
include this feature
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
examples:
accountInactive:
summary: Account inactive
value:
statusCode: 403
message: >-
Your account is not active. Please reach out to support at
support@lusha.com
v3NotEnabled:
summary: V3 access not enabled
value:
statusCode: 403
message: V3 API access is not enabled for your account
TooManyRequests:
description: Too many requests - rate limit exceeded
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
example:
statusCode: 429
message: Too many requests. Please wait before making another request.
headers:
x-rate-limit-daily:
description: Total requests allowed per day
schema:
type: integer
x-daily-requests-left:
description: Requests remaining in daily quota
schema:
type: integer
x-rate-limit-hourly:
description: Total requests allowed per hour
schema:
type: integer
x-hourly-requests-left:
description: Requests remaining in hourly quota
schema:
type: integer
x-rate-limit-minute:
description: Total requests allowed per minute
schema:
type: integer
x-minute-requests-left:
description: Requests remaining in current minute window
schema:
type: integer
securitySchemes:
ApiKeyAuth:
type: apiKey
in: header
name: api_key
description: >
Your Lusha API key. You can find this in your Lusha dashboard under API
settings.
Include this key in the `api_key` header for all requests.
````