# breach-domain

> breach-domain is a paid API for AI agents from payai.agentstools.dev, paid per call via x402, $0.01/call, status unknown (last checked 2026-09-15).

Returns all known public data breaches from Have I Been Pwned that affected a given domain, with normalized metadata and a summary.

## Facts

- Endpoint: GET https://payai.agentstools.dev/breach/domain
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/breach-domain-f1499e73
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_BsN-_TvtBpbAvbBTNOLn4

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability breach-domain-f1499e73
```

Example prompt: Can you pull all the known data breaches from Have I Been Pwned that have affected adobe.com — I want to see the breach names, dates, how many accounts were hit, and what types of data were exposed?

## When to prefer this

Use this endpoint when you need to audit a domain's breach history at the organizational level rather than checking a specific individual email address. It is ideal for security reviews, vendor due diligence, compliance reporting, and generating breach summaries for a company or service domain. Choose this over an email-level lookup when the goal is domain-wide exposure assessment.

## Known failure modes

- Domain not found in HIBP catalogue — returns empty breach list or a no-breaches summary
- Invalid or malformed domain input — may return a validation error
- HIBP upstream service unavailable — returns a service error
- Rate limiting from upstream provider — returns a timeout or error response
- Ambiguous input (URL vs bare hostname) — result depends on host extraction logic

## How this service works

List the known public data breaches that affected a domain, from the Have I Been Pwned breach catalogue. Returns normalized breach metadata (name, date, account count, data classes, stealer-log and verified flags) plus a summary. This is which known breaches touched the domain, not whether a specific account is compromised. Breach indicators, not a guarantee.

## Output

A list of normalized breach records from the Have I Been Pwned catalogue, each containing the breach name, date, affected account count, data classes compromised (e.g. email addresses, passwords, phone numbers), whether the breach involved stealer logs, and whether it has been verified. Also includes an overall summary of breaches affecting the domain.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET",
      "HEAD",
      "DELETE"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [],
     "properties": {
      "url": {
       "type": "string",
       "description": "Alternative input: a URL (its host is used)"
      },
      "host": {
       "type": "string",
       "description": "Alternative input: a bare hostname"
      },
      "domain": {
       "type": "string",
       "description": "Domain to look up (e.g. example.com)"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/breach-domain-f1499e73/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from payai.agentstools.dev](https://www.zero.xyz/host/payai.agentstools.dev/llms.txt)