Agent Exchange x402 census and directory

x402 census · saylorinnovations.com · 6b1b61b84b85 · JSON

GET /api/breach/password

live

Password Breach Check by SHA-1 (Have I Been Pwned). Check whether a password appears in known data breaches by its SHA-1 hash (the password itself is never sent), with how many times it has been seen. Have I Been Pwned k-anonymity range API.

Verdict: live. The unpaid GET reached a valid 402 (confirmed by the re-probe of 2026-10-01). The live amount equals the catalog price.

Facts from the catalogs

FieldValue
URLhttps://saylorinnovations.com/api/breach/password
MethodGET
Price$0.001 USDC = 1000 atomic units of 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913
Networkeip155:8453 (base); also accepts solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp, eip155:137, eip155:42161
payTo0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa
Sellersaylorinnovations.com
Catalogscdp (row updated 2026-09-25), payai (row updated 2026-09-29)
Listed since (lower bound)2026-09-25 (earliest catalog timestamp; catalogs report last-update times only)
Last catalog update2026-09-29
CDP quality counters2 calls and 1 unique payers in 30 days, last call 2026-09-25 (catalog-reported, not verified on chain)
Category (keyword rule)dev-tools/utilities
Templated pathno
x402Version in catalog2
Service name / tags · breach, password

Unpaid probe (census of 2026-09-30)

FieldValue
Probed at2026-09-30T23:44:11.794Z
HEAD402
GET402
Verdictlive live: valid 402 to an unpaid GET
402 carried inheader+body
x402Version in the 4022
accepts[0]{"scheme":"exact","network":"eip155:8453","amount":"1000","payTo":"0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","maxTimeoutSeconds":120,"extra":{"name":"USD Coin","version":"2"}}
Live amount equals catalog priceyes
Live payTo equals catalog payToyes
extensions.bazaar in the 402yes
PAYMENT-REQUIRED headeryes
WWW-Authenticate offernone
Content type / server / CORSapplication/json / cloudflare / *
Latency2,070 ms
ErrorPayment required to access this resource.

Latest re-probe

FieldValue
Re-probed at2026-10-01T07:13:42.000Z (cron)
Verdict nowlive unchanged
HEAD / GET402 / 402
accepts[0]{"scheme":"exact","network":"eip155:8453","amount":"1000","payTo":"0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","maxTimeoutSeconds":120,"extra":{"name":"USD Coin","version":"2"}}
Live amount equals catalog priceyes
Latency703 ms
Errornone

On-chain facts for the payTo (public address)

FieldValue
Distinct payers2
Payments6
USDC volume$0.02
Median payment$0.0025
First / last payment2026-09-27 / 2026-09-29
Sampler-shaped share of payments100.0%
Payers that are not samplers0
Sourceforensics-2026-09-30
Address0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa

Declared input and output (extensions.bazaar)

{
 "input": {
  "method": "GET",
  "queryParams": {
   "sha1": "5BAA61E4C9B93F3F0682250B6CF8331B7EE68FD8"
  },
  "type": "http"
 },
 "output": {
  "type": "json",
  "example": {
   "advice": "This password appears in known breach corpora — do not use it.",
   "pwned": true,
   "sha1_prefix": "5BAA6",
   "times_seen": 52256179
  }
 }
}

Try it (unpaid: shows the 402)

curl -si -X GET 'https://saylorinnovations.com/api/breach/password' -H 'accept: application/json'

The catalog declares GET. A 402 answer carries the payment requirements in the JSON body and, for x402 v2, base64 in the PAYMENT-REQUIRED header. This page never sends a payment.

Paid checks (x402, USDC on Base)

GET https://bazaar.agentexchange.work/r/6b1b61b84b85/probe.json re-runs this probe right now for $0.01 and writes the result here. POST https://bazaar.agentexchange.work/featured with {"id":"6b1b61b84b85"} places this resource at the top of the report and search pages for 30 days for $1.00, labelled. Unpaid requests answer 402 with the terms. Pricing.

Catalog references: PayAI listing status · agentic.market (CDP Bazaar front end) · this record as JSON · all resources on saylorinnovations.com.