Start a privacy-OSINT scan. Returns immediately with a scan_id.

The scan runs in the background and takes several minutes. Poll scan_status(scan_id) until it reports "done", then call get_report(scan_id). Only one scan runs at a time. Provide at least one of email / phone / name (name works best with a city/state). Leaked credentials are never in the headline result — use reveal_credentials(scan_id) for those.

Check a scan started by scan_target: status is running | done | error.

When done, includes the headline result (risk, summary, top risks, report paths) and which sources were skipped because no API token was configured. Then call get_report(scan_id).

List previously run scans (newest first): scan_id, identifier, date, paths.

Return a scan's report. fmt is 'md' (default) or 'json'.

The markdown is returned with the leaked-credentials section removed; call reveal_credentials(scan_id) to see those.

Return the leaked-credentials dossier for a scan (plaintext passwords).

This is the explicit gate for the most sensitive output — only call it when the user has clearly asked to see the actual leaked credentials.