# AgentRXI Breached Password Check

> AgentRXI Breached Password Check is a paid API for AI agents from agentrxi.com, paid per call via x402, $0.002/call, status unknown (last checked 2026-10-15).

Checks one or more SHA-1-hashed passwords against known data breach databases using k-anonymity, returning breach frequency counts.

## Facts

- Endpoint: GET https://agentrxi.com/v1/password/check?utm_source=zero.xyz
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/agentrxi-breached-password-check-81ae71d9
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_YvZthSFlk5cfoCU5NDpLc

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability agentrxi-breached-password-check-81ae71d9
```

Example prompt: Can you check if the password 'Summer2023!' has ever appeared in a known data breach — just hash it to SHA-1 first so the actual password isn't sent, and tell me how many times it's been seen?

## When to prefer this

Use this endpoint when you need to check whether one or more passwords have appeared in known data breaches using privacy-preserving k-anonymity (only SHA-1 hash prefixes leave your system). It is ideal for registration flows, login audits, and security tooling. Prefer this over rolling your own HIBP integration when you need a pay-per-call API with no subscription, or when batching up to 50 hashes per call to reduce overhead. Choose this over a full plaintext password checker whenever privacy and non-transmission of credentials is a hard requirement.

## Known failure modes

- Invalid SHA-1 hash format (not 40 hex characters) returns an error
- More than 50 hashes in a single call may be rejected or truncated
- Network timeout if the upstream Have I Been Pwned service is unavailable
- Payment failure if USDC balance is insufficient for the $0.002 per-call fee
- Empty or missing sha1 query parameter returns a validation error

## How this service works

Breached password check: is this password in known data breaches, and how often? Send only the SHA-1 hash (never the password); just the first 5 characters reach Have I Been Pwned (k-anonymity). Up to 50 hashes per call.

## Output

Returns for each submitted SHA-1 hash whether the password appears in known breach databases and how many times it has been observed across breached datasets, allowing the caller to assess compromise severity without ever transmitting the plaintext password.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "sha1"
     ],
     "properties": {
      "sha1": {
       "type": "string",
       "description": "SHA-1 hash(es), 40 hex each, comma separated"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/agentrxi-breached-password-check-81ae71d9/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agentrxi.com](https://www.zero.xyz/host/agentrxi.com/llms.txt)