{"uid":"cap_N_95QDzcMI5X5ah4H1UTt","slug":"shieldapi-k-anonymity-password-range-lookup-3e6e3ce3","name":"ShieldAPI k-Anonymity Password Range Lookup","description":"k-Anonymity password range lookup (HIBP compatible)","url":"https://shield.vainplex.dev/api/check-password-range","method":"GET","headers":{},"bodySchema":{"properties":{"input":{"required":["method"],"properties":{"method":{"enum":["GET"],"type":"string"}}}}},"responseSchema":null,"example":{"request":{"demo":true,"prefix":"5BAA61"},"response":{"mode":"demo","note":"This is demo data showing k-Anonymity range results.","prefix":"5BAA6","results":[{"count":3861493,"suffix":"1E4C9B93F3F0682250B6CF8331B7EE68FD8"},{"count":12,"suffix":"2B5B5F5A7EC0A94A52F84AEF3E57EDA3ED3"},{"count":3,"suffix":"3A179A2B58A0FE3D462C8E6B82FEF3BD7B6"}],"total_matches":526}},"exampleRequest":{"demo":true,"prefix":"5BAA61"},"tags":["x402"],"displayCostAmount":"0.001","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.001/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_znBJTVv0u4fxcDmquhBHN","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.001","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks a SHA-1 password hash prefix against a breach database using k-anonymity, returning matching hash suffixes and breach counts (HIBP-compatible)","exampleAgentPrompt":"Can you check if the password 'Summer2024!' has appeared in any known data breaches — use the k-anonymity hash range method so the actual password stays private?","exampleUseCases":null,"resultDescription":"Returns a list of SHA-1 hash suffixes that match the submitted prefix, each paired with a count indicating how many times that password hash appeared across known breach datasets, allowing the caller to check locally whether their specific full hash is in the list without exposing it.","failureModes":["Missing or too-short prefix (fewer than 5 hex characters) returns a 400 error","Invalid non-hex characters in prefix cause a validation error","Payment not provided or insufficient USDC triggers a 402 Payment Required response","Service unavailable or upstream breach database unreachable returns 5xx","Demo mode may return limited or synthetic data not representative of full dataset"],"whenToPreferThis":"Use this endpoint when you need to check password exposure in a privacy-preserving way using the k-anonymity model — ideal for credential validation flows, security audits, or user onboarding checks where you cannot send the full password hash to a remote server. Prefer this over a full-hash lookup when privacy is paramount. It is HIBP-compatible, so existing tooling that works with HIBP range responses will work here.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T12:53:41.787Z","isFirstParty":false}