# Have I Been Pwned Account Breach Lookup

> Have I Been Pwned Account Breach Lookup is a paid API for AI agents from api.agentstools.dev, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-12).

Checks whether a given email address appears in known data breaches, returning breach metadata (name, date, data classes) without exposing passwords or raw leaked data.

## Facts

- Endpoint: GET https://api.agentstools.dev/breach/account?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-12
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/have-i-been-pwned-account-breach-lookup-44a44c70
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_vKbL0Mse91qP_oEFPZHtm

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability have-i-been-pwned-account-breach-lookup-44a44c70
```

Example prompt: Can you check if jane.doe@example.com has shown up in any known data breaches — I want to know which breaches and what types of data were exposed?

## When to prefer this

Use this endpoint when you need to check whether a specific email address appears in known public data breaches and want only breach metadata (name, date, data classes) without retrieving actual leaked credentials. Prefer this over manual HIBP queries when integrating into an automated agent workflow. Not suitable for bulk email scanning or when you need the actual leaked passwords (which are intentionally withheld).

## Known failure modes

- No API key configured — endpoint returns available: false and cannot perform account lookups
- Email not found in any breach — returns empty result or 404-style not-found response
- Invalid email format — malformed input may return a validation error
- Rate limiting from upstream HIBP API — may return 429 Too Many Requests
- HIBP service unavailable — upstream outage causes failure

## How this service works

Look up the known breaches an email address appears in, returning breach METADATA only (name, date, data classes) and never passwords or leaked personal data. Uses the keyed Have I Been Pwned account API; when no API key is configured the route returns available false and the keyless password and domain routes still work. Breach indicators, not a guarantee.

## Output

Returns a list of breach records the email appears in, each with the breach name, the date it occurred, and the categories of data that were compromised (e.g. email addresses, passwords, phone numbers). Returns only metadata — no actual leaked passwords or personal data are included. If the API key is not configured, returns available: false.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET",
      "HEAD",
      "DELETE"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "email"
     ],
     "properties": {
      "email": {
       "type": "string",
       "description": "Email address to check against known breaches"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/have-i-been-pwned-account-breach-lookup-44a44c70/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.agentstools.dev](https://www.zero.xyz/host/api.agentstools.dev/llms.txt)