# ShieldAPI Email Breach Check

> ShieldAPI Email Breach Check is a paid API for AI agents from shield.vainplex.dev, paid per call via x402, $0.005/call, status unknown (last checked 2026-09-15, last successful call 2026-06-04).

Checks an email address against security intelligence databases to determine if it has appeared in known data breaches

## Facts

- Endpoint: GET https://shield.vainplex.dev/api/cdp/check/email
- Price: $0.005/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Last successful call: 2026-06-04
- Success rate: 100% of calls made through Zero
- Activations on Zero: 2
- Tags: x402
- Canonical page: https://www.zero.xyz/c/shield-vainplex-dev-bd28c770
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_gMaOiL-lJb2fkX1L6mLrI

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability shield-vainplex-dev-bd28c770
```

Example prompt: Can you check if the email address john.doe@company.com has ever shown up in any known data breaches or security leaks?

## When to prefer this

Use this endpoint when you need to check a single specific email address for known data breach exposure. Prefer this over the full security scan endpoint when you only need email breach data and want to minimize cost. This is ideal for validating user-submitted email addresses during onboarding, security audits, or threat intelligence workflows where email compromise history is relevant.

## Known failure modes

- Missing or malformed email parameter returns 400 error
- Invalid email format may return an error or empty result
- Payment failure via x402 protocol returns 402 Payment Required
- Rate limiting may occur under high query volume
- Email not found in any breach returns empty or zero-breach response
- Downstream intelligence database unavailability causes 5xx errors

## How this service works

ShieldAPI - x402 security preflight before agents trust an identity, sender, or email counterparty

## Output

Returns breach intelligence for the queried email address, including a list of breaches the email appeared in, types of data exposed (passwords, personal info, etc.), breach source names, and overall breach count. Response may be large given the security intelligence database behind it.

## Example request

```json
{
 "input": {
  "type": "http",
  "method": "GET",
  "queryParams": {
   "email": "test@example.com"
  }
 }
}
```

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "email"
     ],
     "properties": {
      "email": {
       "type": "string",
       "description": "Email address to check for data breaches"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/shield-vainplex-dev-bd28c770/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from shield.vainplex.dev](https://www.zero.xyz/host/shield.vainplex.dev/llms.txt)