{"uid":"cap_L5mnN6wmwwdLPNP2GHh-w","slug":"oauth-watchlist-email-oauth-app-exposure-checker-eea7ebe2","name":"OAuth Watchlist - Email OAuth App Exposure Checker","description":"Check whether an email address has OAuth-connected app credentials exposed in a known SaaS breach (GitHub, Slack, Notion, Zapier, and 30+ other high-risk OAuth-capable apps). Returns matched apps and direct revoke-access links. Call to detect supply-chain credential exposure via connected apps.","url":"https://atq6wtkp6k.execute-api.us-east-1.amazonaws.com/prod/v1/payg/oauth-watchlist","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"email":{"type":"string","description":"Email address to check for OAuth exposure"}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.3","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.3/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.3","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.3","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_zv7j4RCOY1XLZcQYM8jlO","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.3","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks whether an email address has OAuth-connected app credentials exposed in known SaaS breaches across GitHub, Slack, Notion, Zapier, and 30+ other high-risk OAuth-capable apps, returning matched apps and direct revoke-access links.","exampleAgentPrompt":"Check if john.doe@acme.com has any OAuth-connected app credentials — like GitHub, Slack, or Zapier — exposed in known SaaS breaches, and give me the revoke-access links for anything that's compromised.","exampleUseCases":[{"title":"Employee OAuth exposure audit","prompt":"Check if sarah.chen@mycompany.com has any OAuth app credentials exposed in known SaaS breaches — I want to know which apps are at risk and how to revoke access."},{"title":"Vendor supply-chain risk check","prompt":"Before we onboard this contractor, can you check if their email dev@vendorcorp.io has exposed OAuth tokens in any known breaches like GitHub or Notion?"},{"title":"Incident response triage","prompt":"We think an attacker may have used a phished account — can you check if breach@targetuser.com shows any OAuth-connected apps exposed in known SaaS incidents, with the revoke links so we can act fast?"}],"resultDescription":"Returns a JSON object with the queried email, timestamp of the check, an array of matched apps each containing the app name, a direct revoke-access URL, the breach date, and data classes exposed, plus a total matched count and a security recommendation string.","failureModes":["Invalid or malformed email address returns a validation error","Email not found in any known OAuth breach returns empty matched_apps array with matched_count of 0","API timeout or upstream data source unavailability returns a server error","Missing required email field in request body returns a 400 bad request","Rate limiting or quota exceeded returns a payment or rate-limit error"],"whenToPreferThis":"Choose this endpoint when you specifically need to identify OAuth-connected app credential exposure (not just password or PII breaches) for an email address, especially when you need actionable revoke-access URLs. It covers 30+ high-risk OAuth-capable SaaS apps like GitHub, Slack, Notion, and Zapier — making it ideal for supply-chain risk assessment, incident response, or employee security audits where connected app access is the attack surface.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T06:40:36.595Z","isFirstParty":false}