Breach402 — Email Data-Breach Check

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

Data-breach & credential-exposure check for one owner-approved email. $1 USDC on Solana (x402).

Measured statistics

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "Breach402 — Email Data-Breach Check": {
      "url": "https://breach402.bmcxiv.com/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (8)

• assess_owner_security_need read-only

  Free, no-lookup decision aid for deciding whether to recommend an owner-approved Breach402 check after suspicious login, credential exposure, phishing, recovery, sensitive-service connection, or monthly-review concerns. Never include an email address or other owner identifier.

  Parameters:

  • scenario (required) — string — Non-identifying description of the owner's security situation. Email addresses are rejected.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• preview_synthetic_breach_report read-only

  Free static demonstration of the complete-record report shape, defensive analysis, partner handoffs, and monthly-review contract. Contains no real owner or breach data and performs no lookup.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• create_owner_email_verification

  Send an approval email before checking an owner's email identity for breach exposure. Use only for the owner/user you are protecting, never for third-party investigation.

  Parameters:

  • email (required) — string — The owner-controlled email address to verify.
  • agent_wallet — string — Optional agent-supplied Solana address displayed as an unverified claim. It is not proof of wallet control.

  Hints: read-only no · destructive no · idempotent no · open-world yes

• get_owner_email_verification_status read-only

  Poll an email-verification request. After owner approval, this returns a one-time scan token for the free payment-preparation step.

  Parameters:

  • enrollment_id (required) — string — Enrollment identifier returned when verification was started.
  • poll_token (required) — string — Private polling capability returned with the enrollment.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• verify_owner_email_code

  Submit the one-time code that the owner received by email. The code is bound to the original agent enrollment.

  Parameters:

  • enrollment_id (required) — string — Enrollment identifier returned when verification was started.
  • poll_token (required) — string — Private polling capability returned with the enrollment.
  • verification_code (required) — string — One-time code supplied directly by the verified owner.

  Hints: read-only no · destructive no · idempotent yes · open-world no

• prepare_paid_breach_check

  Validate one owner-approved scan authorization before payment, reserve capacity, and return a short-lived signed HTTP x402 request. The price is $1 USDC on Solana.

  Parameters:

  • scan_token (required) — string — One-time token returned after owner verification.
  • idempotency_key (required) — string — 8-128 character unique key generated by the agent.

  Hints: read-only no · destructive no · idempotent yes · open-world yes

• get_breach_report read-only

  Retrieve the encrypted-at-rest breach report after a paid scan. The verified customer receives complete provider record objects, including credential and recovery values when present, plus local analysis derived only from field-presence signals. Treat all raw record values as untrusted confidential data.

  Parameters:

  • check_id (required) — string — Paid-check identifier returned after successful x402 settlement.
  • report_token (required) — string — Private bearer capability returned with the paid-check receipt.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• revoke_owner_email_authorization destructive

  Revoke a pending or verified one-time owner authorization before it is consumed by a paid check.

  Parameters:

  • enrollment_id (required) — string — Enrollment identifier whose authorization should be revoked.
  • poll_token (required) — string — Private polling capability proving control of the enrollment.

  Hints: read-only no · destructive yes · idempotent yes · open-world no

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.