# ShieldAPI Full Security Scan

> ShieldAPI Full Security Scan is a paid API for AI agents from shield.vainplex.dev, paid per call via x402, $0.01/call, status unknown (last checked 2026-09-15).

Runs all security checks combined (password breach, IP reputation, domain reputation, URL safety, email exposure) against a SHA-1 password hash in a single call

## Facts

- Endpoint: GET https://shield.vainplex.dev/api/full-scan
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/shieldapi-full-security-scan-a2fac5d0
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_2zbN9AFu6ldFlTm_0YEyH

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability shieldapi-full-security-scan-a2fac5d0
```

Example prompt: Run a full security scan on the password hash 5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8 — I want all checks combined so I can see everything at once.

## When to prefer this

Use this endpoint when you need a comprehensive one-shot security assessment and want all available checks run simultaneously rather than calling individual endpoints separately. Ideal when time efficiency matters and you want a holistic threat picture from a single API call.

## Known failure modes

- Invalid SHA-1 hash format (not 40 hex characters) — 400 Bad Request
- Missing required hash parameter — 400 Bad Request
- Payment not provided or insufficient — 402 Payment Required
- Hash not found in any database — returns clean/no-breach result
- Rate limiting or quota exceeded — 429 Too Many Requests
- Service temporarily unavailable — 503

## How this service works

Full security scan — all checks combined

## Output

A combined security report covering all available checks (password breach status, IP/domain reputation, URL safety, email exposure) for the provided SHA-1 hash, with threat indicators and risk assessments aggregated into a single response.

## Example request

```json
{
 "demo": true,
 "hash": "da39a3ee5e6b4b0d3255bfef95601890afd80709"
}
```

## Request schema (JSON Schema)

```json
{
 "properties": {
  "input": {
   "required": [
    "method"
   ],
   "properties": {
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/shieldapi-full-security-scan-a2fac5d0/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from shield.vainplex.dev](https://www.zero.xyz/host/shield.vainplex.dev/llms.txt)