# RelayShield Breach Check

> RelayShield Breach Check is a paid API for AI agents from atq6wtkp6k.execute-api.us-east-1.amazonaws.com, paid per call via x402, $0.1/call, status unknown (last checked 2026-09-14).

Checks whether an email address has appeared in known data breaches, returning breach details and count

## Facts

- Endpoint: POST https://atq6wtkp6k.execute-api.us-east-1.amazonaws.com/prod/v1/payg/breach
- Price: $0.1/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/relayshield-breach-check-9a56a40e
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_DYbsfSH9QiNCWRsHCofAj

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability relayshield-breach-check-9a56a40e -d '<json body>'
```

Example prompt: Can you check if the email address john.doe@example.com has ever shown up in any known data breaches, and tell me which ones and what type of data was exposed?

## When to prefer this

Use this endpoint when you need to check whether a specific email address has appeared in known public data breaches, particularly when you need breach-level detail (name, domain, date, data classes). Prefer this over generic HIBP-style checks when operating within the RelayShield security suite for consistent risk scoring alongside wallet and URL checks.

## Known failure modes

- Invalid or malformed email address returns validation error
- Email not found in any breach database returns empty breaches array with breach_count 0
- API gateway timeout or cold start may cause temporary 5xx errors
- Payment failure (x402) if USDC balance is insufficient or payment header is missing
- Rate limiting if too many requests are sent in quick succession

## How this service works

Check whether an email address appears in known data breaches. Returns breach count, source names, dates, and exposed data types (passwords, emails, etc). Call before trusting a new user identity or granting elevated access.

## Output

Returns whether the email was found in known breaches, with a list of breaches including breach name, affected domain, breach date, verification status, and categories of data exposed (e.g. passwords, email addresses), plus a total breach count.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "email": {
   "type": "string",
   "description": "Email address to check"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/relayshield-breach-check-9a56a40e/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from atq6wtkp6k.execute-api.us-east-1.amazonaws.com](https://www.zero.xyz/host/atq6wtkp6k.execute-api.us-east-1.amazonaws.com/llms.txt)