Roundhouse AI

DopamineDesk AI Marketplace

Check whether a password hash appears in the Have I Been Pwned breach corpus using k-anonymity: the caller sends only the first five hex characters of a SHA-1 hash, so no password or full hash ever leaves the caller. Returns the matching hash range, or a breach count when an optional suffix is supplied.

DataLiveeip155:8453Exactvia cdp
https://ai-data-marketplace-1042299154756.us-central1.run.app/api/v1/pwned_check
BreachPwnedEmailSecurityCompromise
Calls · 30d
1→ 0%
This endpoint's own trailing-30-day call count, as published by the upstream catalog and snapshotted daily. 20 snapshots so far.
$8.76
Verified settled volume
236 settlements proven x402 by their on-chain EIP-3009 marker.
$0.0050
Listed price
As published in the catalog. Always read the live 402 before paying.
1
Calls · 30d
Upstream's own call count for this endpoint, not ours.
1
Unique payers · 30d
Last called 2026-08-14 09:26Z
—
Upstream on-chain volume
Reported by the source catalog.
Paid to
0x8647F7D7a1368a467Ad1FF757fBc2e7167973558

The wallet the 402 directs payment to. Its whole payment record — every payer, every chain — is on the merchant page.

Asset 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913

Provider

The payTo wallet does not resolve to a registered ERC-8004 agent. That is not a verdict on the service — most of the catalog is unregistered.

Live 402 challenge

Captured by the enrichment pass, not read just now. Prices can change — always read the 402 the endpoint answers with.

{
  "error": "Payment Required",
  "accepts": [
    {
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "extra": {
        "name": "USD Coin",
        "version": "2"
      },
      "payTo": "0x8647F7D7a1368a467Ad1FF757fBc2e7167973558",
      "amount": "5000",
      "scheme": "exact",
      "network": "eip155:8453",
      "mimeType": "application/json",
      "resource": "https://ai-data-marketplace-1042299154756.us-central1.run.app/api/v1/pwned_check",
      "maxAmountRequired": "5000",
      "maxTimeoutSeconds": 300
    }
  ],
  "message": "This route accepts the x402 v2 PAYMENT-SIGNATURE flow on Base Mainnet. The legacy transaction-hash flow remains available for existing clients.",
  "resource": {
    "url": "https://ai-data-marketplace-1042299154756.us-central1.run.app/api/v1/pwned_check",
    "tags": [
      "breach",
      "pwned",
      "email",
      "security",
      "compromise"
    ],
    "iconUrl": "https://ai-data-marketplace-1042299154756.us-central1.run.app/favicon.svg",
    "mimeType": "application/json",
    "description": "Check whether a password hash appears in the Have I Been Pwned breach corpus using k-anonymity: the caller sends only the first five hex characters of a SHA-1 hash, so no password or full hash ever leaves the caller. Returns the matching hash range, or a breach count when an optional suffix is supplied.",
    "serviceName": "Breached Password Hash Check"
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "type": "http",
          "queryParams": {
            "prefix": "21BD1"
          }
        },
        "output": {
          "type": "json",
          "example": {
            "hashes": "[array; full example in /openapi.json]",
            "prefix": "21BD1",
            "source": "Have I Been Pwned Pwned Passwords (k-anonymity range API)",
            "success": true,
            "fetched_at": "2026-08-07T07:32:40.701Z",
            "range_size": 1925,
            "source_url": "https://api.pwnedpasswords.com/range/21BD1",
            "privacy_note": "Only a 5-character SHA-1 prefix is sent upstream. No password or full hash leaves the caller.",
            "marketplace_metadata": "[object with keys: data_mode, billable, availability, source; full example in /openapi.json]"
          }
        }
      },
      "schema": {
        "type": "object",
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "required": [
          "input"
        ],
        "properties": {
          "input": {
            "type": "object",
            "required": [
              "type",
              "method"
            ],
            "properties": {
              "type": {
                "type": "string",
                "const": "http"
              },
              "method": {
                "enum": [
                  "GET",
                  "HEAD",
                  "DELETE"
                ],
                "type": "string"
              },
              "queryParams": {
                "type": "object",
                "required": [
                  "prefix"
                ],
                "properties": {
                  "prefix": {
                    "type": "string",
                    "description": "First 5 hex characters of the SHA-1 hash of the password to check. Only this prefix is sent upstream."
                  },
                  "suffix": {
                    "type": "string",
                    "description": "Optional remaining 35 hex characters of the SHA-1 hash. When supplied, the response reports a direct breach count instead of the full range."
                  }
                },
                "additionalProperties": true
              }
            },
            "additionalProperties": false
          },
          "output": {
            "type": "object",
            "required": [
              "type"
            ],
            "properties": {
              "type": {
                "type": "string"
              },
              "example": {
                "type": "object",
                "required": [
                  "success",
                  "source",
                  "source_url",
                  "fetched_at",
                  "privacy_note",
                  "prefix",
                  "range_size",
                  "hashes",
                  "marketplace_metadata"
                ],
                "properties": {
                  "hashes": {
                    "type": "string"
                  },
                  "prefix": {
                    "type": "string"
                  },
                  "source": {
                    "type": "string"
                  },
                  "success": {
                    "type": "boolean"
                  },
                  "fetched_at": {
                    "type": "string"
                  },
                  "range_size": {
                    "type": "integer"
                  },
                  "source_url": {
                    "type": "string"
                  },
                  "privacy_note": {
                    "type": "string"
                  },
                  "marketplace_metadata": {
                    "type": "string"
                  }
                },
                "additionalProperties": true
              }
            }
          }
        }
      }
    }
  },
  "x402Version": 2,
  "x402_invoice": {
    "amount": "0.005",
    "currency": "USDC",
    "payment_id": "b1a09e04-bb3d-485e-9ef7-8183ca0f2f40",
    "description": "One request to /api/v1/pwned_check",
    "submit_headers": [
      "x-402-payment-tx",
      "x-402-payment-id"
    ],
    "accepted_networks": [
      {
        "asset": "USDC",
        "network": "base",
        "chain_id": 8453,
        "asset_contract": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "destination_address": "0x8647F7D7a1368a467Ad1FF757fBc2e7167973558"
      }
    ],
    "expires_in_seconds": 900
  },
  "marketplace_metadata": {
    "source": "Have I Been Pwned Pwned Passwords range API",
    "billable": true,
    "data_mode": "live_source",
    "availability": "operational"
  }
}

Accepts

The payment requirements as published to the catalog. Read the live 402 before paying — a price here is a claim, not a quote.

0.005USDC≈ $0.005 USD
on Base · exact scheme

Pay 0.005 USDC on Base to 0x8647…73558. The signed payment is good for 5 minutes.

Paid to
0x8647…73558
USD Coin contract
0x8335…02913
Payment window
5 minutes
As published
5000 smallest units
The catalog’s raw entry
[
  {
    "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
    "extra": {
      "name": "USD Coin",
      "version": "2"
    },
    "payTo": "0x8647F7D7a1368a467Ad1FF757fBc2e7167973558",
    "amount": "5000",
    "scheme": "exact",
    "network": "eip155:8453",
    "maxTimeoutSeconds": 300
  }
]

Extensions

{
  "bazaar": {
    "info": {
      "input": {
        "type": "http",
        "method": "GET",
        "queryParams": {
          "prefix": "21BD1"
        }
      },
      "output": {
        "type": "json",
        "example": {
          "hashes": [
            {
              "suffix": "0002EEFFB2CCA91812B5CC9956854E22BEB",
              "breach_count": 4
            },
            {
              "suffix": "000F6468C6E4D09C0C239A4C2769501B3DD",
              "breach_count": 5959
            }
          ],
          "prefix": "21BD1",
          "source": "Have I Been Pwned Pwned Passwords (k-anonymity range API)",
          "success": true,
          "fetched_at": "2026-08-07T07:32:40.701Z",
          "range_size": 1925,
          "source_url": "https://api.pwnedpasswords.com/range/21BD1",
          "privacy_note": "Only a 5-character SHA-1 prefix is sent upstream. No password or full hash leaves the caller.",
          "marketplace_metadata": {
            "source": "Have I Been Pwned Pwned Passwords range API",
            "billable": true,
            "data_mode": "live_source",
            "availability": "operational"
          }
        }
      }
    },
    "schema": {
      "type": "object",
      "$schema": "https://json-schema.org/draft/2020-12/schema",
      "required": [
        "input"
      ],
      "properties": {
        "input": {
          "type": "object",
          "required": [
            "type",
            "method"
          ],
          "properties": {
            "type": {
              "type": "string",
              "const": "http"
            },
            "method": {
              "enum": [
                "GET"
              ],
              "type": "string"
            },
            "queryParams": {
              "type": "object",
              "required": [
                "prefix"
              ],
              "properties": {
                "prefix": {
                  "type": "string",
                  "description": "First 5 hex characters of the SHA-1 hash of the password to check. Only this prefix is sent upstream."
                },
                "suffix": {
                  "type": "string",
                  "description": "Optional remaining 35 hex characters of the SHA-1 hash. When supplied, the response reports a direct breach count instead of the full range."
                }
              },
              "additionalProperties": true
            }
          },
          "additionalProperties": false
        },
        "output": {
          "type": "object",
          "required": [
            "type"
          ],
          "properties": {
            "type": {
              "type": "string"
            },
            "example": {
              "type": "object",
              "required": [
                "success",
                "source",
                "source_url",
                "fetched_at",
                "privacy_note",
                "prefix",
                "range_size",
                "hashes",
                "marketplace_metadata"
              ],
              "properties": {
                "hashes": {
                  "type": "array",
                  "items": {
                    "type": "object",
                    "required": [
                      "suffix",
                      "breach_count"
                    ],
                    "properties": {
                      "suffix": {
                        "type": "string"
                      },
                      "breach_count": {
                        "type": "integer"
                      }
                    },
                    "additionalProperties": true
                  }
                },
                "prefix": {
                  "type": "string"
                },
                "source": {
                  "type": "string"
                },
                "success": {
                  "type": "boolean"
                },
                "fetched_at": {
                  "type": "string"
                },
                "range_size": {
                  "type": "integer"
                },
                "source_url": {
                  "type": "string"
                },
                "privacy_note": {
                  "type": "string"
                },
                "marketplace_metadata": {
                  "type": "object",
                  "required": [
                    "data_mode",
                    "billable",
                    "availability",
                    "source"
                  ],
                  "properties": {
                    "source": {
                      "type": "string"
                    },
                    "billable": {
                      "type": "boolean"
                    },
                    "data_mode": {
                      "type": "string"
                    },
                    "availability": {
                      "type": "string"
                    }
                  },
                  "additionalProperties": true
                }
              },
              "additionalProperties": true
            }
          }
        }
      }
    }
  }
}

Provenance

Seen in the source catalog
2026-08-14 09:26Z
Last indexed by Roundhouse
2026-09-13 09:10Z
Last enriched (probe, favicon, geo)
2026-09-23 22:15Z
x402 version
2
Max timeout
300s
Liveness probe
HTTP 402
Report

Hand this page to an agent

Copy the prompt and paste it into Claude, an MCP client or your own agent — it will vet this service and call it over the free read API. No key, no account.

GET api.roundhouseai.io/v0/endpoints

This endpoint's own trailing-30-day call count, as published by the upstream catalog and snapshotted daily. 20 snapshots so far. Verified volume counts only settlements with an on-chain EIP-3009 marker.

Open skill.md
Show the prompt
Using Roundhouse, look up the x402 service DopamineDesk AI Marketplace and tell me whether it is
worth paying: what a call costs, whether the endpoint answered when last probed, and what
its payment record actually shows.

curl -s 'https://api.roundhouseai.io/v0/endpoints?q=DopamineDesk%20AI%20Marketplace'
curl -s 'https://api.roundhouseai.io/v0/merchants/<the payTo wallet returned above>'

Then call it: read the price from the live 402 at https://ai-data-marketplace-1042299154756.us-central1.run.app/api/v1/pwned_check, never from
a cached figure, and pay with an x402 client.

The /v0 API needs an API key (`authorization: Bearer rh_live_…`) on everything except
/v0/unified* and /v0/endpoints. Mint a personal key for $0.01 at GET https://api.roundhouseai.io/v0/test/x402,
or use an organization key from https://roundhouseai.io/dashboard/team.

If you do not have Roundhouse tools or skills installed, read
https://roundhouseai.io/skill.md first — it is the whole procedure.