Question 1

What is CordCat?

Accepted Answer

CordCat is an advanced Discord OSINT (Open Source Intelligence) platform. Given a Discord user ID, it simultaneously queries the official Discord API, a private breach data aggregator, a FiveM (GTA V RP) player record index, and the EU Digital Services Act transparency database, returning a complete intelligence report in under 2 seconds.

Question 2

Is it legal to use CordCat?

Accepted Answer

CordCat exclusively queries publicly available data: Discord public profiles, breach data (already in the public domain after leaks), FiveM server databases (publicly disclosed), and EU DSA orders (official government transparency records). We do not store or redistribute profile data. Use must comply with applicable law and our Terms of Service; prohibited uses include stalking, harassment, and bulk scraping.

Question 3

Do I need an account to use CordCat?

Accepted Answer

No. Basic Discord ID lookups are free and require no account. Creating a free account unlocks favorites, search history, and your personal API key (60 req/hr on the free plan).

Question 4

What is a Discord ID / Snowflake?

Accepted Answer

Every Discord user, server, channel, and message has a unique 17 to 20 digit numeric ID called a Snowflake. You can find a user's ID by right-clicking their name in Discord, then "Copy User ID" (Developer Mode must be on in Settings → Advanced). URLs like discord.com/users/80351110224678912 also contain the ID.

Question 5

Where does the breach data come from?

Accepted Answer

Breach records are sourced from a private breach intelligence aggregator containing 500M+ entries collected from publicly disclosed data leaks. We query it by Discord ID/username to surface any matches. We do not store these results; they are fetched live on each lookup.

Question 6

What are FiveM records?

Accepted Answer

FiveM is a modification framework for GTA V used by hundreds of roleplay servers. Several large FiveM server databases have been publicly leaked and indexed. Our database contains 77M+ player records linking Discord IDs to in-game names, Steam IDs, Rockstar licenses, IP addresses, and more.

Question 7

What is the DSA sanctions database?

Accepted Answer

The EU Digital Services Act (DSA) requires large online platforms to publish transparency reports about content moderation decisions. These include account restrictions, content removals, and bans, identifying users by platform UID. We index these official government transparency records and cross-reference them with Discord accounts.

Question 8

How do I get an API key?

Accepted Answer

Create a free account, then visit your Dashboard → API Keys. Free-tier keys are limited to 60 requests per hour. For unlimited access, contact us at hello@cord.cat. API keys are prefixed with "cc_" and must be passed via the X-API-Key header.

Question 9

What is the API rate limit?

Accepted Answer

Unauthenticated lookups via the website: 30 requests per minute. Authenticated site usage (logged-in browser sessions): same limit. Free API keys: 60 requests per hour (hourly bucket, resets every hour). Unlimited plan: no enforced rate limit.

Question 10

Can I export a lookup as an image?

Accepted Answer

Yes. On any lookup result page, click the Download button on the Discord card. The export is generated server-side and produces a PNG card showing the user's profile, badges, breach count, and creation date.

Question 11

How do I delete my account or data?

Accepted Answer

Go to Settings → Account → Delete Account. This permanently removes your account, search history, and favorites. For requests to remove specific data associated with a Discord ID from our indexes, email legal@cord.cat.

Question 12

Is CordCat affiliated with Discord?

Accepted Answer

No. CordCat is an independent project. We use Discord's public API to retrieve profile data, but we are not endorsed, authorized, sponsored, or otherwise approved by Discord Inc.

Question 13

How do I report a bug or security issue?

Accepted Answer

For bugs, use the Support page or email hello@cord.cat. For security vulnerabilities, please use responsible disclosure; read our Bug Bounty page for scope and contact details. We reward valid security reports.

Question 14

Why is some data missing or incorrect?

Accepted Answer

Discord profile data is fetched live and reflects the current public state of the account. Breach and FiveM data depend on third-party databases and may be incomplete. DSA records are limited to EU-regulated platforms. If you believe a record is incorrect, contact legal@cord.cat.