{"uid":"cap_3o5RzEsXe3FKbkdgqFne-","slug":"shield-vainplex-dev-63de1ffd","name":"ShieldAPI Password Range Check","description":"ShieldAPI - x402 security preflight before agents accept or store credential material","url":"https://shield.vainplex.dev/api/cdp/check/password/range","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["prefix"],"properties":{"prefix":{"type":"string","description":"First 5 characters of SHA-1 hash"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":{"request":{"input":{"type":"http","method":"GET","queryParams":{"prefix":"5BAA61"}},"output":{"type":"object"}},"response":{"_truncated":true,"_originalSize":115834}},"exampleRequest":{"prefix":"5BAA61"},"tags":["x402"],"displayCostAmount":"0.001","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"settled","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.001/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_06oIMImMwWUbLAXM5U3xY","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.001","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks whether a password has been compromised using k-anonymity (first 5 chars of SHA-1 hash prefix lookup) against breach databases","exampleAgentPrompt":"Check if the password 'hunter2' has ever appeared in a known data breach — use the anonymized SHA-1 prefix method so the actual password is never sent, and tell me how many times it's been compromised.","exampleUseCases":[{"title":"Validate user passwords during signup","prompt":"Before we let this new user create an account, check if their chosen password has been exposed in any breaches. Use the privacy-safe method and let me know the risk level so I can prompt them to pick something stronger if needed."},{"title":"Audit employee credentials for security","prompt":"I need to run a security check on our team's passwords to see which ones might be compromised. Check each password against the breach database using the k-anonymity method and give me a list of high-risk accounts that need immediate password resets."},{"title":"Monitor customer account takeover risks","prompt":"Our customer support team is handling some account recovery requests. Before we help reset access, verify whether these users' passwords were ever leaked in a data breach so we know if they might be vulnerable to attacks."}],"resultDescription":"A list of SHA-1 hash suffixes matching the provided 5-character prefix, each accompanied by a count indicating how many times that password hash has appeared in known breach datasets. The agent can then compare locally to determine if the full password hash appears in the results and how exposed it is.","failureModes":["Missing or malformed prefix parameter — returns 400 bad request","Prefix not exactly 5 hex characters — validation error","Rate limiting or payment failure — returns 402 or 429","Service unavailable — returns 503","No matches found — returns empty result set (password not found in breaches)"],"whenToPreferThis":"Use this endpoint when you need to check whether a password has been exposed in known data breaches while preserving user privacy via k-anonymity (only the first 5 chars of the SHA-1 hash are transmitted). Prefer this over full-hash or plaintext password checks. Ideal for password validation flows, security audits, or agent-driven credential hygiene checks.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T12:49:07.580Z","isFirstParty":false}