# breach-account

> breach-account is a paid API for AI agents from payai.agentstools.dev, paid per call via x402, $0.01/call, status unknown (last checked 2026-09-14).

Look up which known data breaches a given email address has appeared in, returning breach metadata (name, date, data classes) without exposing actual leaked credentials or personal data.

## Facts

- Endpoint: GET https://payai.agentstools.dev/breach/account
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/breach-account-d78e0ce1
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_NCtViy2HwS6ztXXVBt7kd

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability breach-account-d78e0ce1
```

Example prompt: Can you check if the email address john.smith@example.com has shown up in any known data breaches and tell me which ones and what kind of data was exposed?

## When to prefer this

Choose this endpoint when you need to check a specific email address against the Have I Been Pwned breach database and get structured breach metadata (name, date, data classes). Prefer this over password-hash checking endpoints when the goal is breach history awareness rather than credential verification. Use when you need safe, metadata-only breach indicators without any exposure of actual leaked data.

## Known failure modes

- No API key configured — returns available: false and account lookups are unavailable
- Email address not found in any breach — returns empty list or equivalent negative result
- Invalid or malformed email address — may return validation error
- Rate limiting from upstream HIBP API — may result in 429 or similar error
- Email address not in HIBP database — treated as clean, not a guarantee of safety

## How this service works

Look up the known breaches an email address appears in, returning breach METADATA only (name, date, data classes) and never passwords or leaked personal data. Uses the keyed Have I Been Pwned account API; when no API key is configured the route returns available false and the keyless password and domain routes still work. Breach indicators, not a guarantee.

## Output

Returns a list of known breaches the email address appears in, each with the breach name, the date it occurred, and the categories of data that were exposed (e.g. passwords, email addresses, phone numbers). Does not return actual leaked data. If the API key is not configured, returns available: false.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET",
      "HEAD",
      "DELETE"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "email"
     ],
     "properties": {
      "email": {
       "type": "string",
       "description": "Email address to check against known breaches"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/breach-account-d78e0ce1/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from payai.agentstools.dev](https://www.zero.xyz/host/payai.agentstools.dev/llms.txt)