Advertise
MCP.so
Sign In

Have I Been Pwned MCP Server

@Cyreslab-AI

Repository

Basic information

Category

Other

License

MIT license

Transports

stdio

Author

Cyreslab-AI

About Have I Been Pwned MCP Server

No overview available yet

#mcp#security-tools#mcp-server#cyreslab

Have I Been Pwned MCP Server config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "hibp-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@smithery/cli",
        "install",
        "@Cyreslab-AI/hibp-mcp-server",
        "--client",
        "claude"
      ]
    }
  }
}

Have I Been Pwned MCP Server tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

Fetch the live tool list by running this server in a temporary sandbox using the button above.

Overview

What is Have I Been Pwned MCP Server?

A Model Context Protocol server that integrates with the Have I Been Pwned API to check if email addresses or passwords have been compromised in data breaches. It provides four tools for querying breach data.

How to use Have I Been Pwned MCP Server?

Install via Smithery or clone the repository, install dependencies, build, and configure the server in your MCP settings file with your HIBP_API_KEY environment variable. Once configured, use Claude or another MCP client to invoke the tools: check_email, check_password, get_breach_details, or list_all_breaches.

Key features of Have I Been Pwned MCP Server

  • Check if an email appears in known data breaches
  • Check if a password has been exposed (using k‑anonymity)
  • Get detailed information about a specific data breach
  • List all breaches, optionally filtered by domain

Use cases of Have I Been Pwned MCP Server

  • Security audits: verify if user accounts are compromised
  • Password hygiene: test passwords without revealing them fully
  • Incident response: investigate a specific breach’s scope
  • Domain monitoring: list breaches affecting a particular company

Frequently asked questions

1

What API does the server use?

It uses the official Have I Been Pwned API. You need a valid API key, obtainable at haveibeenpwned.com/API/Key.

2

How is password checking secure?

The password check employs k‑anonymity: only the first 5 characters of the SHA‑1 hash are sent to the API. Hash suffix matching is completed locally.

3

What are the runtime requirements?

Node.js v14 or higher and npm v6 or higher are required. The server expects a `HIBP_API_KEY` environment variable.

4

Which tools are available?

Four tools: `check_email`, `check_password`, `get_breach_details`, and `list_all_breaches`.

5

Where is the API key configured?

In your MCP settings JSON file, add the key as an environment variable named `HIBP_API_KEY`.

Comments

More Other MCP servers

EverArt

modelcontextprotocol

Model Context Protocol Servers

88.1K

Blender

ahujasid

Open-source MCP to use Blender with any LLM

23.6K

Codelf

unbug

A search tool helps dev to solve the naming things problem.

14.2K

YOUB

Connect your AI assistant to your own YOUB endurance training account. Read recorded activities with full analysis, planned sessions, race goals, wellness (HRV, sleep, resting HR) and your athletic profile. Create or mov

Soar Flight Booking MCP

Soar Flight Booking MCP is a remote MCP server available at https://mcp.soar.flights.

Advertise