{"uid":"cap_PldFcawUcbM1CMKxglj7P","slug":"ddg-password-breach-check-8785f76b","name":"DDG Password Breach Check","description":"Checks whether a password appears in known breach corpora via the HIBP Pwned Passwords range API with k-anonymity: only a 5-char SHA-1 prefix leaves the edge, and the password is never stored, logged or echoed. Accepts a raw password or a caller-computed SHA-1.","url":"https://agents.daedalusdevelopmentgroup.com/v1/password-breach-check?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input","output"],"properties":{"input":{"type":"object","required":["type","method","bodyType","body"],"properties":{"body":{"type":"object"},"type":{"type":"string","const":"http"},"method":{"enum":["POST","PUT","PATCH"],"type":"string"},"bodyType":{"enum":["json","form-data","text"],"type":"string"}},"additionalProperties":true},"output":{"type":"object","required":["type","example"],"properties":{"type":{"type":"string"},"example":{"ok":true}},"additionalProperties":true}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_u5X2UjKslcf4CXUVWmcCh","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks whether a given password appears in known data breach corpora using the HIBP Pwned Passwords k-anonymity range API, without exposing the full password.","exampleAgentPrompt":"Can you check whether the password 'Tr0ub4dor&3' has ever appeared in a known data breach, using a privacy-preserving k-anonymity check so the actual password is never sent over the wire?","exampleUseCases":[{"title":"User registration password safety gate","prompt":"Before letting a new user set their password, check if 'Summer2024!' has been found in any known data breaches — I want to reject compromised passwords at signup."},{"title":"Security audit of stored credentials","prompt":"I'm reviewing our service accounts — can you check whether the password 'P@ssw0rd123' shows up in any breach databases so I know if it needs to be rotated?"},{"title":"Personal password hygiene check","prompt":"I want to know if the password I've been using for years, 'CorrectHorseBatteryStaple', has ever been leaked in a breach before I keep using it anywhere."}],"resultDescription":"Returns a boolean indicating whether the password was found in known breach corpora, along with how many times it appeared across breached datasets. The full password never leaves the caller — only a 5-character SHA-1 prefix is transmitted to preserve k-anonymity.","failureModes":["Invalid or malformed SHA-1 hash input returns an error","Missing required body fields returns a validation error","HIBP upstream service unavailability causes request failure","Payment of 0.01 USDC not provided or rejected causes 402 response","Rate limiting if too many requests are made in quick succession"],"whenToPreferThis":"Choose this endpoint when you need a privacy-preserving breach check that never exposes the full password — it uses k-anonymity so only a 5-char SHA-1 prefix is transmitted. Prefer this over rolling your own HIBP integration when you want a simple, agent-payable API call without managing API keys or HIBP rate limits directly. Ideal for AI agents that need to enforce password hygiene at account creation or credential rotation workflows.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-22T12:30:17.698Z","isFirstParty":false,"canonicalSlug":"ddg-password-breach-check-8785f76b"}