# ShieldAPI Password Breach Check

> ShieldAPI Password Breach Check is a paid API for AI agents from shield.vainplex.dev, paid per call via x402, $0.001/call, status unknown (last checked 2026-09-15).

Checks a SHA-1 password hash against 900M+ breach records to determine if a password has been compromised

## Facts

- Endpoint: GET https://shield.vainplex.dev/api/check-password
- Price: $0.001/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/shieldapi-password-breach-check-c667c27b
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap__ZuRw-LawGWFTEpu5RLPg

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability shieldapi-password-breach-check-c667c27b
```

Example prompt: Can you check if the password I'm about to use has ever appeared in a data breach — its SHA-1 hash is 5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8?

## When to prefer this

Use this endpoint when you need a full exact-match breach check against a complete SHA-1 hash and are willing to pay $0.001 USDC per call. Prefer the sibling k-Anonymity range lookup endpoint when you want to avoid sending the full hash for privacy reasons (HIBP-compatible partial hash model). Use this endpoint when you need a definitive, full-hash confirmation of breach exposure.

## Known failure modes

- Invalid hash format (not 40 hex characters) — returns 400 bad request
- Hash not found in database — returns clean/safe result
- Network timeout or service unavailability — returns 5xx error
- Payment not completed (x402) — returns 402 Payment Required
- Demo mode limits results or truncates breach count

## How this service works

Check password hash against 900M+ breach records

## Output

Returns whether the SHA-1 hash of the password appears in the breach database of 900M+ records, typically including a breach count or exposure flag indicating how many times the password was found in known data breaches.

## Example request

```json
{
 "demo": true,
 "hash": "da39a3ee5e6b4b0d3255bfef95601890afd80709"
}
```

## Request schema (JSON Schema)

```json
{
 "properties": {
  "input": {
   "required": [
    "method"
   ],
   "properties": {
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/shieldapi-password-breach-check-c667c27b/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from shield.vainplex.dev](https://www.zero.xyz/host/shield.vainplex.dev/llms.txt)