Advertise
MCP.so
Sign In

Have I Been Pwned MCP Server

@Cyreslab-AI

Repository

Basic information

Category

Other

Last updated

License

MIT license

Transports

stdio

Author

Cyreslab-AI

About Have I Been Pwned MCP Server

No overview available yet

#mcp#security-tools#mcp-server#cyreslab

Have I Been Pwned MCP Server config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "hibp-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@smithery/cli",
        "install",
        "@Cyreslab-AI/hibp-mcp-server",
        "--client",
        "claude"
      ]
    }
  }
}

Have I Been Pwned MCP Server tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

Fetch the live tool list by running this server in a temporary sandbox using the button above.

Overview

What is Have I Been Pwned MCP Server?

A Model Context Protocol server that integrates with the Have I Been Pwned API to check if email addresses or passwords have been compromised in data breaches. It provides four tools for querying breach data.

How to use Have I Been Pwned MCP Server?

Install via Smithery or clone the repository, install dependencies, build, and configure the server in your MCP settings file with your HIBP_API_KEY environment variable. Once configured, use Claude or another MCP client to invoke the tools: check_email, check_password, get_breach_details, or list_all_breaches.

Key features of Have I Been Pwned MCP Server

  • Check if an email appears in known data breaches
  • Check if a password has been exposed (using k‑anonymity)
  • Get detailed information about a specific data breach
  • List all breaches, optionally filtered by domain

Use cases of Have I Been Pwned MCP Server

  • Security audits: verify if user accounts are compromised
  • Password hygiene: test passwords without revealing them fully
  • Incident response: investigate a specific breach’s scope
  • Domain monitoring: list breaches affecting a particular company

Frequently asked questions

1

What API does the server use?

It uses the official Have I Been Pwned API. You need a valid API key, obtainable at haveibeenpwned.com/API/Key.

2

How is password checking secure?

The password check employs k‑anonymity: only the first 5 characters of the SHA‑1 hash are sent to the API. Hash suffix matching is completed locally.

3

What are the runtime requirements?

Node.js v14 or higher and npm v6 or higher are required. The server expects a `HIBP_API_KEY` environment variable.

4

Which tools are available?

Four tools: `check_email`, `check_password`, `get_breach_details`, and `list_all_breaches`.

5

Where is the API key configured?

In your MCP settings JSON file, add the key as an environment variable named `HIBP_API_KEY`.

Comments

More Other MCP servers

M

Mandate Law

Mandate Law (Allen Gibby)

Mandate Law is a law firm for AI products, agents, and the consumer apps they live in, built so coding agents can work with counsel directly. An agent can check whether a request is in scope and get the fixed fee (free a

Activepieces

activepieces

AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents

23.2K

Sequential Thinking

modelcontextprotocol

Model Context Protocol Servers

88.2K

Courio

Benoit

Mail a real postal letter worldwide from a PDF or text. No account, pay per letter.

Glasswarp

Glasswarp

See and control a real Windows PC you own — from any MCP client, locally or remotely. Observe (UIA + screenshots), click/type/drag/scroll, launch apps, owner Live View. BYOH: your machine, your key.

Advertise