# CyberPulse Data Breach & Credential Exposure Lookup

> CyberPulse Data Breach & Credential Exposure Lookup is a paid API for AI agents from cyberpulse.theaslangroupllc.com, paid per call via x402, $0.15/call, status unknown (last checked 2026-09-16).

Checks a domain for known data breaches, credential dumps, dark-web signals, and surfaces applicable regulatory notification duties (GDPR, CCPA, PDPA, LGPD, POPIA).

## Facts

- Endpoint: GET https://cyberpulse.theaslangroupllc.com/api/cyber/breach-check
- Price: $0.15/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-16
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/cyberpulse-data-breach-credential-exposure-lookup-ebc5ae0c
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_mQhm1O7mrIJfRj2noG0Oa

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability cyberpulse-data-breach-credential-exposure-lookup-ebc5ae0c
```

Example prompt: Can you check whether acme.com has appeared in any known data breaches or credential dumps, and let me know if we have any GDPR or CCPA notification obligations based on what you find?

## When to prefer this

Use this endpoint when you need a fast, per-domain check for breach history, credential leak exposure, and compliance notification obligations in a single call. Prefer this over general OSINT endpoints when the primary concern is credential exposure and regulatory duty-to-notify rather than open ports or CVEs. Ideal for security audits, compliance workflows, vendor risk assessments, and post-incident triage.

## Known failure modes

- Domain not found or no breach data available — returns empty or null breach list
- Invalid domain format — returns 400 bad request
- Payment not included or insufficient — returns 402 Payment Required
- Rate limit exceeded — returns 429 Too Many Requests
- Domain has no indexed breach history — may return empty results that are not necessarily safe to interpret as clean
- Regulatory mapping may be incomplete for edge-case jurisdictions

## How this service works

Data-breach lookup and credential-exposure check for any domain. Surfaces known data breaches, credential dumps, dark-web signals, and regulatory notification duties (GDPR, CCPA, PDPA, LGPD, POPIA), for security and compliance agents. Authorized security use only.

## Output

Returns a structured report for the queried domain including: list of known data breaches linked to that domain, credential dump occurrences, dark-web signals (paste sites, forum chatter), and a breakdown of applicable regulatory notification requirements under GDPR, CCPA, PDPA, LGPD, and/or POPIA depending on breach scope and jurisdiction.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET",
      "HEAD",
      "DELETE"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {
      "lang": {
       "type": "string",
       "description": "en | es | fr | de | ja | zh | ko | pt | ar | hi (default: en)"
      },
      "domain": {
       "type": "string",
       "description": "Domain to check — e.g. \"example.com\" | \"company.org\" — checks breach history for this domain"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "errors": {
     "type": "object",
     "description": "Documented error responses, keyed by HTTP status code",
     "additionalProperties": {
      "type": "object",
      "required": [
       "description"
      ],
      "properties": {
       "example": {
        "type": "object"
       },
       "description": {
        "type": "string"
       }
      }
     }
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "domain": "example.com",
  "breach_summary": {
   "known_breaches_count": 2,
   "overall_exposure_level": "HIGH",
   "estimated_records_exposed": 85000
  },
  "known_breaches": [
   {
    "date": "2022-09-15",
    "verified": true,
    "breach_name": "Example Corp 2022",
    "breach_cause": "SQL injection",
    "data_types_exposed": [
     "email",
     "password_hash",
     "phone"
    ],
    "records_compromised": 85000
   }
  ],
  "credential_exposure": {
   "hash_types": [
    "MD5 (crackable)"
   ],
   "password_hashes_found": true,
   "credential_stuffing_risk": "HIGH",
   "plaintext_passwords_found": false
  },
  "regulatory_implications": "GDPR: 72-hour notification to supervisory authority required if EU residents affected. CCPA: notification to California residents if 500+ affected."
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/cyberpulse-data-breach-credential-exposure-lookup-ebc5ae0c/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from cyberpulse.theaslangroupllc.com](https://www.zero.xyz/host/cyberpulse.theaslangroupllc.com/llms.txt)