{"uid":"cap_YvZthSFlk5cfoCU5NDpLc","slug":"agentrxi-breached-password-check-81ae71d9","name":"AgentRXI Breached Password Check","description":"Breached password check: is this password in known data breaches, and how often? Send only the SHA-1 hash (never the password); just the first 5 characters reach Have I Been Pwned (k-anonymity). Up to 50 hashes per call.","url":"https://agentrxi.com/v1/password/check?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["sha1"],"properties":{"sha1":{"type":"string","description":"SHA-1 hash(es), 40 hex each, comma separated"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_pLnhgZARz_Mo-w7E_5Q2n","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks one or more SHA-1-hashed passwords against known data breach databases using k-anonymity, returning breach frequency counts.","exampleAgentPrompt":"Can you check if the password 'Summer2023!' has ever appeared in a known data breach — just hash it to SHA-1 first so the actual password isn't sent, and tell me how many times it's been seen?","exampleUseCases":[{"title":"Password strength validation at signup","prompt":"A user is trying to register with the password 'Password123' — can you check if it's been found in any data breaches by hashing it to SHA-1 and running it through the breach checker? Tell me how many times it's appeared so I know whether to reject it."},{"title":"Bulk audit of employee passwords","prompt":"I have five employee passwords I want to check for breach exposure: hash each one to SHA-1 — 'qwerty', 'letmein', 'monkey', 'dragon', 'trustno1' — and tell me which ones have been found in known data breaches and how many times each appeared."},{"title":"Security tool: flag compromised login attempt","prompt":"A user just logged in with a password that hashes to SHA-1 value 5BAA61E4C9B93F3F0682250B6CF8331B7EE68FD8 — can you check if that hash appears in known breach databases and how often, so I can decide whether to warn them?"}],"resultDescription":"Returns for each submitted SHA-1 hash whether the password appears in known breach databases and how many times it has been observed across breached datasets, allowing the caller to assess compromise severity without ever transmitting the plaintext password.","failureModes":["Invalid SHA-1 hash format (not 40 hex characters) returns an error","More than 50 hashes in a single call may be rejected or truncated","Network timeout if the upstream Have I Been Pwned service is unavailable","Payment failure if USDC balance is insufficient for the $0.002 per-call fee","Empty or missing sha1 query parameter returns a validation error"],"whenToPreferThis":"Use this endpoint when you need to check whether one or more passwords have appeared in known data breaches using privacy-preserving k-anonymity (only SHA-1 hash prefixes leave your system). It is ideal for registration flows, login audits, and security tooling. Prefer this over rolling your own HIBP integration when you need a pay-per-call API with no subscription, or when batching up to 50 hashes per call to reduce overhead. Choose this over a full plaintext password checker whenever privacy and non-transmission of credentials is a hard requirement.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-15T06:38:51.805Z","isFirstParty":false,"canonicalSlug":"agentrxi-breached-password-check-81ae71d9"}