Security Math
Entropy bits for a random password policy, PIN or diceware passphrase from length and alphabet, with crack-time ranges.
OtherLiveeip155:8453Exactvia cdp
PasswordEntropyPassphraseCrack-time
Calls · 30d
1
This endpoint's own trailing-30-day call count, as published by the upstream catalog and snapshotted daily. 4 snapshots so far.
$24.31
Verified settled volume
1,175 settlements proven x402 by their on-chain EIP-3009 marker.
$0.020
Listed price
As published in the catalog. Always read the live 402 before paying.
1
Calls · 30d
Upstream's own call count for this endpoint, not ours.
1
Unique payers · 30d
Last called 2026-10-20 20:30Z
—
Upstream on-chain volume
Reported by the source catalog.
Paid to
0xb531320805C5BED1D46AEaDcF4F008FDF172DBDaThe wallet the 402 directs payment to. Its whole payment record — every payer, every chain — is on the merchant page.
Asset 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913
Provider
The payTo wallet does not resolve to a registered ERC-8004 agent. That is not a verdict on the service — most of the catalog is unregistered.
Live 402 challenge
Captured by the enrichment pass, not read just now. Prices can change — always read the 402 the endpoint answers with.
{
"error": "Payment required",
"accepts": [
{
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2"
},
"payTo": "0xb531320805C5BED1D46AEaDcF4F008FDF172DBDa",
"scheme": "exact",
"network": "base",
"mimeType": "application/json",
"resource": "https://security-math.x402tookit.com/password-entropy",
"description": "Entropy bits for a random password policy, PIN or diceware passphrase from length and alphabet, with crack-time ranges.",
"outputSchema": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"words": "true",
"length": 4,
"poolSize": 7776
}
},
"output": {
"asOf": "2026-10-11T14:38:14.054Z",
"unit": "words",
"length": 4,
"rating": "reasonable for low-value online accounts only",
"source": "computed locally (information theory)",
"reasons": [
"Entropy = length x log2(alphabet size), valid ONLY if every choice is uniformly random (dice, a password manager); human-chosen passwords are much weaker.",
"Crack times assume the attacker must search on average half the space; the attacker speeds are illustrative orders of magnitude, not benchmarks.",
"…1 more"
],
"summary": "4 random words from a list of 7776: 51.7 bits of entropy (reasonable for low-value online accounts only).",
"verdict": "MODERATE",
"degraded": false,
"crackTimes": [
{
"attacker": "online-throttled",
"assumption": "online login with lockouts or rate limiting (about 1 guess per second)",
"averageTime": "5.79e+7 years",
"worstCaseTime": "1.16e+8 years",
"guessesPerSecond": 1
},
{
"attacker": "online-unthrottled",
"assumption": "online login with no rate limiting (about 1,000 guesses per second)",
"averageTime": "57928 years",
"worstCaseTime": "115857 years",
"guessesPerSecond": 1000
}
],
"disclaimer": "Screening signal computed from the named public source. Not financial, legal or investment advice; provided as is. Verify at the source before acting.",
"notChecked": [
"real passwords: NEVER send one here; this takes only a length and alphabet size",
"human-chosen passwords, which have far less entropy than uniformly random ones (dictionary words, patterns, reuse, breaches)",
"…2 more"
],
"bitsPerUnit": 12.925,
"entropyBits": 51.7,
"log10Guesses": 15.56,
"alphabetOrListSize": 7776,
"characterClassSizes": {
"lower": 26,
"upper": 26,
"digits": 10,
"symbols": 32
}
}
},
"maxAmountRequired": "20000",
"maxTimeoutSeconds": 300
},
{
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "D6ZhtNQ5nT9ZnTHUbqXZsTx5MH2rPFiBBggX4hY1WePM"
},
"payTo": "DUPiupXtuox38dcGoXUKer5mAydCzmaHjrbQ66qeEm8s",
"scheme": "exact",
"network": "solana",
"mimeType": "application/json",
"resource": "https://security-math.x402tookit.com/password-entropy",
"description": "Entropy bits for a random password policy, PIN or diceware passphrase from length and alphabet, with crack-time ranges.",
"outputSchema": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"words": "true",
"length": 4,
"poolSize": 7776
}
},
"output": {
"asOf": "2026-10-11T14:38:14.054Z",
"unit": "words",
"length": 4,
"rating": "reasonable for low-value online accounts only",
"source": "computed locally (information theory)",
"reasons": [
"Entropy = length x log2(alphabet size), valid ONLY if every choice is uniformly random (dice, a password manager); human-chosen passwords are much weaker.",
"Crack times assume the attacker must search on average half the space; the attacker speeds are illustrative orders of magnitude, not benchmarks.",
"…1 more"
],
"summary": "4 random words from a list of 7776: 51.7 bits of entropy (reasonable for low-value online accounts only).",
"verdict": "MODERATE",
"degraded": false,
"crackTimes": [
{
"attacker": "online-throttled",
"assumption": "online login with lockouts or rate limiting (about 1 guess per second)",
"averageTime": "5.79e+7 years",
"worstCaseTime": "1.16e+8 years",
"guessesPerSecond": 1
},
{
"attacker": "online-unthrottled",
"assumption": "online login with no rate limiting (about 1,000 guesses per second)",
"averageTime": "57928 years",
"worstCaseTime": "115857 years",
"guessesPerSecond": 1000
}
],
"disclaimer": "Screening signal computed from the named public source. Not financial, legal or investment advice; provided as is. Verify at the source before acting.",
"notChecked": [
"real passwords: NEVER send one here; this takes only a length and alphabet size",
"human-chosen passwords, which have far less entropy than uniformly random ones (dictionary words, patterns, reuse, breaches)",
"…2 more"
],
"bitsPerUnit": 12.925,
"entropyBits": 51.7,
"log10Guesses": 15.56,
"alphabetOrListSize": 7776,
"characterClassSizes": {
"lower": 26,
"upper": 26,
"digits": 10,
"symbols": 32
}
}
},
"maxAmountRequired": "20000",
"maxTimeoutSeconds": 300
},
{
"asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
"extra": {
"name": "USD Coin",
"version": "2"
},
"payTo": "0xb531320805C5BED1D46AEaDcF4F008FDF172DBDa",
"scheme": "exact",
"network": "polygon",
"mimeType": "application/json",
"resource": "https://security-math.x402tookit.com/password-entropy",
"description": "Entropy bits for a random password policy, PIN or diceware passphrase from length and alphabet, with crack-time ranges.",
"outputSchema": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"words": "true",
"length": 4,
"poolSize": 7776
}
},
"output": {
"asOf": "2026-10-11T14:38:14.054Z",
"unit": "words",
"length": 4,
"rating": "reasonable for low-value online accounts only",
"source": "computed locally (information theory)",
"reasons": [
"Entropy = length x log2(alphabet size), valid ONLY if every choice is uniformly random (dice, a password manager); human-chosen passwords are much weaker.",
"Crack times assume the attacker must search on average half the space; the attacker speeds are illustrative orders of magnitude, not benchmarks.",
"…1 more"
],
"summary": "4 random words from a list of 7776: 51.7 bits of entropy (reasonable for low-value online accounts only).",
"verdict": "MODERATE",
"degraded": false,
"crackTimes": [
{
"attacker": "online-throttled",
"assumption": "online login with lockouts or rate limiting (about 1 guess per second)",
"averageTime": "5.79e+7 years",
"worstCaseTime": "1.16e+8 years",
"guessesPerSecond": 1
},
{
"attacker": "online-unthrottled",
"assumption": "online login with no rate limiting (about 1,000 guesses per second)",
"averageTime": "57928 years",
"worstCaseTime": "115857 years",
"guessesPerSecond": 1000
}
],
"disclaimer": "Screening signal computed from the named public source. Not financial, legal or investment advice; provided as is. Verify at the source before acting.",
"notChecked": [
"real passwords: NEVER send one here; this takes only a length and alphabet size",
"human-chosen passwords, which have far less entropy than uniformly random ones (dictionary words, patterns, reuse, breaches)",
"…2 more"
],
"bitsPerUnit": 12.925,
"entropyBits": 51.7,
"log10Guesses": 15.56,
"alphabetOrListSize": 7776,
"characterClassSizes": {
"lower": 26,
"upper": 26,
"digits": 10,
"symbols": 32
}
}
},
"maxAmountRequired": "20000",
"maxTimeoutSeconds": 300
}
],
"x402Version": 1,
"alsoAvailable": {
"llms": "https://security-math.x402tookit.com/llms.txt",
"catalog": "https://security-math.x402tookit.com/catalog",
"message": "Security Math has 8 pay-per-call endpoints (Password entropy, crack-time ranges, NIST key sizes, collision odds, Bloom filter sizing, checksums and Shamir threshold maths.), from $0.02 a call. See the full menu and send your agents our way.",
"openapi": "https://security-math.x402tookit.com/openapi.json",
"related": [
{
"url": "https://security-math.x402tookit.com/crack-time",
"path": "/crack-time",
"what": "Time to brute-force a space of N bits (or N guesses) at a guesses-per-second rate: averag…",
"price": "$0.02"
},
{
"url": "https://security-math.x402tookit.com/shamir-threshold",
"path": "/shamir-threshold",
"what": "Shamir t-of-n secret sharing maths: qualifying subsets, loss tolerance, recovery and comp…",
"price": "$0.02"
},
{
"url": "https://security-math.x402tookit.com/birthday-collision",
"path": "/birthday-collision",
"what": "Birthday-problem collision odds for random IDs or hash outputs, or the count of items tha…",
"price": "$0.02"
}
]
}
}Accepts
The payment requirements as published to the catalog. Read the live 402 before paying — a price here is a claim, not a quote.
0.02USDC≈ $0.02 USD
on Base · exact scheme
Pay 0.02 USDC on Base to 0xb531…2DBDa. The signed payment is good for 5 minutes.
- Paid to
- 0xb531…2DBDa
- USD Coin contract
- 0x8335…02913
- Payment window
- 5 minutes
- As published
- 20000 smallest units
20000units
on solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp · exact scheme
That figure is in the token’s smallest units. Roundhouse does not hold this contract’s decimals, so it is shown as published rather than converted.
- Paid to
- DUPiup…eEm8s
- Token contract
- EPjFWd…TDt1v
- Payment window
- 5 minutes
20000units
on Polygon · exact scheme
That figure is in the token’s smallest units. Roundhouse does not hold this contract’s decimals, so it is shown as published rather than converted.
- Paid to
- 0xb531…2DBDa
- Token contract
- 0x3c49…c3359
- Payment window
- 5 minutes
20000units
on Arbitrum · exact scheme
That figure is in the token’s smallest units. Roundhouse does not hold this contract’s decimals, so it is shown as published rather than converted.
- Paid to
- 0xb531…2DBDa
- Token contract
- 0xaf88…e5831
- Payment window
- 5 minutes
The catalog’s raw entry
[
{
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2"
},
"payTo": "0xb531320805C5BED1D46AEaDcF4F008FDF172DBDa",
"amount": "20000",
"scheme": "exact",
"network": "eip155:8453",
"maxTimeoutSeconds": 300
},
{
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "D6ZhtNQ5nT9ZnTHUbqXZsTx5MH2rPFiBBggX4hY1WePM"
},
"payTo": "DUPiupXtuox38dcGoXUKer5mAydCzmaHjrbQ66qeEm8s",
"amount": "20000",
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"maxTimeoutSeconds": 300
},
{
"asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
"extra": {
"name": "USD Coin",
"version": "2"
},
"payTo": "0xb531320805C5BED1D46AEaDcF4F008FDF172DBDa",
"amount": "20000",
"scheme": "exact",
"network": "eip155:137",
"maxTimeoutSeconds": 300
},
{
"asset": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
"extra": {
"name": "USD Coin",
"version": "2"
},
"payTo": "0xb531320805C5BED1D46AEaDcF4F008FDF172DBDa",
"amount": "20000",
"scheme": "exact",
"network": "eip155:42161",
"maxTimeoutSeconds": 300
}
]Extensions
{
"bazaar": {
"info": {
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"words": "true",
"length": 4,
"poolSize": 7776
}
},
"output": {
"type": "json",
"example": {
"asOf": "2026-10-11T14:38:14.054Z",
"unit": "words",
"length": 4,
"rating": "reasonable for low-value online accounts only",
"source": "computed locally (information theory)",
"reasons": [
"Entropy = length x log2(alphabet size), valid ONLY if every choice is uniformly random (dice, a password manager); human-chosen passwords are much weaker.",
"Crack times assume the attacker must search on average half the space; the attacker speeds are illustrative orders of magnitude, not benchmarks.",
"…1 more"
],
"summary": "4 random words from a list of 7776: 51.7 bits of entropy (reasonable for low-value online accounts only).",
"verdict": "MODERATE",
"degraded": false,
"crackTimes": [
{
"attacker": "online-throttled",
"assumption": "online login with lockouts or rate limiting (about 1 guess per second)",
"averageTime": "5.79e+7 years",
"worstCaseTime": "1.16e+8 years",
"guessesPerSecond": 1
},
{
"attacker": "online-unthrottled",
"assumption": "online login with no rate limiting (about 1,000 guesses per second)",
"averageTime": "57928 years",
"worstCaseTime": "115857 years",
"guessesPerSecond": 1000
}
],
"disclaimer": "Screening signal computed from the named public source. Not financial, legal or investment advice; provided as is. Verify at the source before acting.",
"notChecked": [
"real passwords: NEVER send one here; this takes only a length and alphabet size",
"human-chosen passwords, which have far less entropy than uniformly random ones (dictionary words, patterns, reuse, breaches)",
"…2 more"
],
"bitsPerUnit": 12.925,
"entropyBits": 51.7,
"log10Guesses": 15.56,
"alphabetOrListSize": 7776,
"characterClassSizes": {
"lower": 26,
"upper": 26,
"digits": 10,
"symbols": 32
}
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method"
],
"properties": {
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"type": "object",
"required": [
"length"
],
"properties": {
"lower": {
"type": "string",
"description": "true if a-z are used (default true)"
},
"upper": {
"type": "string",
"description": "true if A-Z are used (default false)"
},
"words": {
"type": "string",
"description": "true for a passphrase of random words drawn from poolSize words"
},
"digits": {
"type": "string",
"description": "true if 0-9 are used (default false)"
},
"length": {
"type": "integer",
"description": "Number of random characters (or words when words=true), 1 to 1000"
},
"symbols": {
"type": "string",
"description": "true if the 32 ASCII punctuation symbols are used (default false)"
},
"poolSize": {
"type": "integer",
"description": "Override: exact alphabet size, or word-list size when words=true (diceware = 7776)"
}
}
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object",
"properties": {
"asOf": {
"type": [
"null",
"string"
]
},
"unit": {
"type": [
"null",
"string"
]
},
"length": {
"type": [
"null",
"number"
]
},
"rating": {
"type": [
"null",
"string"
]
},
"source": {
"type": [
"null",
"string"
]
},
"reasons": {
"type": [
"array",
"null"
],
"items": {
"type": "string"
}
},
"summary": {
"type": [
"null",
"string"
]
},
"verdict": {
"type": [
"null",
"string"
]
},
"degraded": {
"type": [
"boolean",
"null"
]
},
"crackTimes": {
"type": [
"array",
"null"
],
"items": {
"type": "object",
"properties": {
"attacker": {
"type": [
"null",
"string"
]
},
"assumption": {
"type": [
"null",
"string"
]
},
"averageTime": {
"type": [
"null",
"string"
]
},
"worstCaseTime": {
"type": [
"null",
"string"
]
},
"guessesPerSecond": {
"type": [
"null",
"number"
]
}
}
}
},
"disclaimer": {
"type": [
"null",
"string"
]
},
"notChecked": {
"type": [
"array",
"null"
],
"items": {
"type": "string"
}
},
"bitsPerUnit": {
"type": [
"null",
"number"
]
},
"entropyBits": {
"type": [
"null",
"number"
]
},
"log10Guesses": {
"type": [
"null",
"number"
]
},
"alphabetOrListSize": {
"type": [
"null",
"number"
]
},
"characterClassSizes": {
"type": [
"null",
"object"
],
"properties": {
"lower": {
"type": [
"null",
"number"
]
},
"upper": {
"type": [
"null",
"number"
]
},
"digits": {
"type": [
"null",
"number"
]
},
"symbols": {
"type": [
"null",
"number"
]
}
}
}
}
}
}
}
}
}
}
}Provenance
- Seen in the source catalog
- 2026-10-20 20:30Z
- Last indexed by Roundhouse
- 2026-10-22 06:50Z
- Last enriched (probe, favicon, geo)
- 2026-10-20 20:45Z
- x402 version
- 2
- Max timeout
- 300s
- Liveness probe
- HTTP 402
Hand this page to an agent
Copy the prompt and paste it into Claude, an MCP client or your own agent — it will vet this service and call it over the free read API. No key, no account.
GET api.roundhouseai.io/v0/endpoints
This endpoint's own trailing-30-day call count, as published by the upstream catalog and snapshotted daily. 4 snapshots so far. Verified volume counts only settlements with an on-chain EIP-3009 marker.
Show the promptHide the prompt
Using Roundhouse, look up the x402 service Security Math and tell me whether it is worth paying: what a call costs, whether the endpoint answered when last probed, and what its payment record actually shows. curl -s 'https://api.roundhouseai.io/v0/endpoints?q=Security%20Math' curl -s 'https://api.roundhouseai.io/v0/merchants/<the payTo wallet returned above>' Then call it: read the price from the live 402 at https://security-math.x402tookit.com/password-entropy, never from a cached figure, and pay with an x402 client. The /v0 API needs an API key (`authorization: Bearer rh_live_…`) on everything except /v0/unified* and /v0/endpoints. Either pay over x402 (mint a personal key for $0.01 at GET https://api.roundhouseai.io/v0/test/x402), or ask me for an organization key, which I create at https://roundhouseai.io/dashboard/connections. If you have neither, ask before going further. If you do not have Roundhouse tools or skills installed, read https://roundhouseai.io/skill.md first — it is the whole procedure.