{"uid":"cap_LYf0Cc3SjlVF3Mmw6RrtO","slug":"payai-password-breach-checker-59202f5e","name":"PayAI Password Breach Checker","description":"Check whether a password has appeared in known data breaches, using k-anonymity: the password is hashed locally and only a 5-character hash prefix is sent upstream, so the plaintext is never transmitted, logged or stored. Accepts a password, a SHA-1 hash or an NTLM hash. Returns compromised, breach_count and the hash prefix. Credential-exposure indicators, not a guarantee.","url":"https://payai.agentstools.dev/breach/password","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"ntlm":{"type":"string","description":"Alternative input: a full 32-hex NTLM hash (MD4 cannot be computed here, so send the hash for the NTLM corpus)"},"sha1":{"type":"string","description":"Alternative input: a full 40-hex SHA-1 hash of the password (so the plaintext never leaves your side)"},"password":{"type":"string","description":"Plaintext password — hashed locally with SHA-1; never stored, logged or transmitted"}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.003","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.003/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_3XJHgh5iZmfha1VvTQBpN","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.003","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks whether a password has appeared in known data breaches using k-anonymity, returning a compromised flag and breach count without ever transmitting the plaintext.","exampleAgentPrompt":"Can you check if the password 'Tr0ub4dor&3' has ever appeared in a known data breach? I want to know if it's compromised and how many times it's shown up.","exampleUseCases":[{"title":"Pre-registration password safety screen","prompt":"Before I let a new user register with the password 'Summer2024!', can you check if it's been found in any data breaches? I need to know if it's compromised and the breach count so I can warn them."},{"title":"Security audit of stored credentials","prompt":"I need to verify whether the SHA-1 hash 5BAA61E4C9B93F3F0682250B6CF8331B7EE68FD8 corresponds to a breached password — check it against known breach databases and tell me how many times it's appeared."},{"title":"Employee password hygiene check","prompt":"Our security policy says employees can't use passwords that have been in data breaches. Can you check if the NTLM hash 8846F7EAEE8FB117AD06BDD830B7586C shows up as compromised and how many breach records it appears in?"}],"resultDescription":"Returns a JSON object with: 'compromised' (boolean indicating if the password appears in known breaches), 'breach_count' (integer number of times it appears across breach datasets), and 'hash_prefix' (the 5-character SHA-1 prefix sent upstream). These are credential-exposure indicators and not a guarantee of absolute safety.","failureModes":["Invalid input format — password, SHA-1 or NTLM hash must be provided in the correct format","Upstream HIBP API unavailable — service may return an error if the breach database is unreachable","Empty or null password input — endpoint requires a non-empty credential","Rate limiting from upstream — excessive calls may result in temporary throttling","Network timeout — if the k-anonymity upstream query takes too long"],"whenToPreferThis":"Choose this endpoint when you need a privacy-safe breach check that never transmits the plaintext password, using k-anonymity to protect the credential during lookup. Prefer this over raw HIBP API calls when you want a managed, pay-per-call integration without handling the SHA-1 hashing and range-query logic yourself. Ideal for agent workflows that need to programmatically screen passwords at registration, audit credential stores, or enforce security policies.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T18:50:48.372Z","isFirstParty":false}