# Dark Web Breach MCP

> Dark Web Breach MCP is a paid API for AI agents from api.m2mcent.com, paid per call via x402, $0.05/call, status unknown (last checked 2026-09-15).

Processes queries to detect and retrieve data breach information sourced from dark web monitoring

## Facts

- Endpoint: POST https://api.m2mcent.com/darkweb-breach-mcp/api/process
- Price: $0.05/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/dark-web-breach-mcp-26b645a8
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_KWbye-CCQI8R_aIypECwP

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability dark-web-breach-mcp-26b645a8 -d '<json body>'
```

Example prompt: Check the dark web breach database to see if there are any leaked credentials or compromised data associated with 'user@example.com' — I want to know if that email has shown up in any underground breach dumps.

## When to prefer this

Choose this endpoint when you need to programmatically query dark web breach intelligence for specific emails, usernames, or domains as part of a security audit, threat intelligence pipeline, or credential exposure check. Prefer this over general OSINT tools when the use case is specifically dark web breach data.

## Known failure modes

- No breach data found for the queried input — returns empty or null result
- Malformed or missing 'data' field in request body — returns validation error
- Service unavailable or timeout — returns 5xx error
- Payment failure via x402 protocol — request blocked before processing
- Query too vague or unsupported format — returns partial or no results

## How this service works

The premier global index of 1,069 monetized MCP nodes across 205 specialized subdomains. Gasless USDC runtime settlements via x402 V2 Spec on Base L2. Save 95% token context.

## Output

Returns breach-related data found on the dark web matching the query, potentially including compromised email addresses, usernames, passwords or hashes, breach source names, and dates of exposure.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "payload": {
   "type": "string"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "success": true
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/dark-web-breach-mcp-26b645a8/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.m2mcent.com](https://www.zero.xyz/host/api.m2mcent.com/llms.txt)