ShieldAPI — x402 Security Intelligence for AI Agents. 7 endpoints: password breach check (900M+ HIBP hashes), email breach lookup, domain reputation (DNS/blacklists/SSL/SPF/DMARC), IP reputation (Tor/blacklists), URL safety (phishing/malware/brand impersonation), and full security scan. Pay-per-request with USDC micropayments ($0.001-$0.01). No account, no API key, no subscription. Demo mode on all endpoints.
Follow the repository instructions for this skill and your agent. Review the files and dependencies before adding it to your workflow.
SkillHub CLI
skillhub install alberthild/shieldapiInspect the source and compatibility requirements, then follow its installation steps.
Give your agent the source link and ask it to inspect instructions and dependencies before explaining the installation steps.
ShieldAPI is a pay-per-request Security Intelligence Service built on the x402 protocol (HTTP 402 Payment Required). It lets any AI agent perform comprehensive security checks — without accounts, API keys, or subscriptions. Just call, pay, get results.
Payments are settled in USDC on Base Sepolia. All endpoints support free demo mode.
Base URL: https://shield.vainplex.dev/api
Health/Discovery: GET /api/health (free, lists all endpoints + prices)
check-password — Password Breach CheckChecks a full SHA1 hash against 900M+ leaked passwords (HIBP Pwned Passwords).
GET /api/check-password?hash=<40-char-sha1>
{ found: true/false, count: 3861493 }
check-password-range — k-Anonymity Range LookupReturns all matching hash suffixes for a 5-char prefix (privacy-preserving).
GET /api/check-password-range?prefix=<5-char-sha1-prefix>
{ prefix, total_matches, results: [{ suffix, count }] }
check-domain — Domain ReputationChecks DNS records, SPF/DMARC, SSL certificate, and queries Spamhaus/SpamCop/SORBS blacklists.
GET /api/check-domain?domain=<domain>
{ domain, dns, blacklists, ssl, risk_score, risk_level }
check-ip — IP ReputationChecks IPv4 against 4 blacklists, detects Tor exit nodes, resolves reverse DNS.
GET /api/check-ip?ip=<ipv4>
{ ip, blacklists, is_tor_exit, reverse_dns, risk_score, risk_level }
check-email — Email Breach ExposureChecks which data breaches affected the email's domain. Returns breach details, exposed data types, and risk recommendations.
GET /api/check-email?email=<email>
These signals come from indexed source analysis and may lag behind changes. Check the current source files.
# 🛡️ ShieldAPI — Security Intelligence for AI Agents
ShieldAPI is a pay-per-request Security Intelligence Service built on the **x402** protocol (HTTP 402 Payment Required). It lets any AI agent perform comprehensive security checks — without accounts, API keys, or subscriptions. Just call, pay, get results.
Payments are settled in USDC on Base Sepolia. All endpoints support free demo mode.
**Base URL:** `https://shield.vainplex.dev/api`
**Health/Discovery:** `GET /api/health` (free, lists all endpoints + prices)
---
## Endpoints
### 1. `check-password` — Password Breach Check
Checks a full SHA1 hash against 900M+ leaked passwords (HIBP Pwned Passwords).
- **Cost:** 0.001 USDC
- **Request:** `GET /api/check-password?hash=<40-char-sha1>`
- **Returns:** `{ found: true/false, count: 3861493 }`
### 2. `check-password-range` — k-Anonymity Range Lookup
Returns all matching hash suffixes for a 5-char prefix (privacy-preserving).
- **Cost:** 0.001 USDC
- **Request:** `GET /api/check-password-range?prefix=<5-char-sha1-prefix>`
- **Returns:** `{ prefix, total_matches, results: [{ suffix, count }] }`
### 3. `check-domain` — Domain Reputation
Checks DNS records, SPF/DMARC, SSL certificate, and queries Spamhaus/SpamCop/SORBS blacklists.
- **Cost:** 0.003 USDC
- **Request:** `GET /api/check-domain?domain=<domain>`
- **Returns:** `{ domain, dns, blacklists, ssl, risk_score, risk_level }`
### 4. `check-ip` — IP Reputation
Checks IPv4 against 4 blacklists, detects Tor exit nodes, resolves reverse DNS.
- **Cost:** 0.002 USDC
- **Request:** `GET /api/check-ip?ip=<ipv4>`
- **Returns:** `{ ip, blacklists, is_tor_exit, reverse_dns, risk_score, risk_level }`
### 5. `check-email` — Email Breach Exposure
Checks which data breaches affected the email's domain. Returns breach details, exposed data types, and risk recommendations.
- **Cost:** 0.005 USDC
- **Request:** `GET /api/check-email?email=<email>`
- **Returns:** `{ breaches: [...], domain_breach_count, risk_score, risk_level,...Bambu Lab 3D printer control and automation. Activate when user mentions: printer status, 3D printing, slice, analyze model, generate 3D, AMS filament, print monitor, Bambu Lab, or any 3D printing task. Full pi...
Generative Engine Optimization (GEO) for AI search visibility. Optimize content to appear in ChatGPT, Perplexity, Claude, and Google AI Overviews. Use when optimizing websites, pages, or content for LLM discove...
Agents can sign plugins, rotate credentials without losing identity, and publicly attest to behavior.
Send and receive P2P messages using disposable numbers and PINs. No servers, no accounts. Use for human notifications, approval flows, and agent-to-agent communication.