Have I Been Pwned MCP Server

@Cyreslab-AI

代码仓库

基本信息

分类

其他

许可证

MIT license

传输方式

stdio

作者

Cyreslab-AI

关于 Have I Been Pwned MCP Server

暂无概览

#mcp #security-tools #mcp-server #cyreslab

Have I Been Pwned MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "hibp-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@smithery/cli",
        "install",
        "@Cyreslab-AI/hibp-mcp-server",
        "--client",
        "claude"
      ]
    }
  }
}

Have I Been Pwned MCP Server 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

点击上方按钮,在临时沙箱中运行此服务器并实时获取工具列表。

概览

What is Have I Been Pwned MCP Server?

A Model Context Protocol server that integrates with the Have I Been Pwned API to check if email addresses or passwords have been compromised in data breaches. It provides four tools for querying breach data.

How to use Have I Been Pwned MCP Server?

Install via Smithery or clone the repository, install dependencies, build, and configure the server in your MCP settings file with your HIBP_API_KEY environment variable. Once configured, use Claude or another MCP client to invoke the tools: check_email, check_password, get_breach_details, or list_all_breaches.

Key features of Have I Been Pwned MCP Server

Check if an email appears in known data breaches
Check if a password has been exposed (using k‑anonymity)
Get detailed information about a specific data breach
List all breaches, optionally filtered by domain

Use cases of Have I Been Pwned MCP Server

Security audits: verify if user accounts are compromised
Password hygiene: test passwords without revealing them fully
Incident response: investigate a specific breach’s scope
Domain monitoring: list breaches affecting a particular company

常见问题

What API does the server use?

It uses the official Have I Been Pwned API. You need a valid API key, obtainable at haveibeenpwned.com/API/Key.

How is password checking secure?

The password check employs k‑anonymity: only the first 5 characters of the SHA‑1 hash are sent to the API. Hash suffix matching is completed locally.

What are the runtime requirements?

Node.js v14 or higher and npm v6 or higher are required. The server expects a `HIBP_API_KEY` environment variable.

Which tools are available?

Four tools: `check_email`, `check_password`, `get_breach_details`, and `list_all_breaches`.

Where is the API key configured?

In your MCP settings JSON file, add the key as an environment variable named `HIBP_API_KEY`.

其他分类下的更多 MCP 服务器

Handl

Handl speaks the Model Context Protocol. Your whole billing operation — projects, invoices, clients, reports, approvals — as tools any AI assistant can call, inside your autonomy rules.

DeepMark

DeepMark helps teachers deliver rapid, consistent marking with meaningful feedback for every student — in a fraction of the time. What once took a week, now takes one free period.

EverArt

modelcontextprotocol

Model Context Protocol Servers

88.1K

MaxKB

1Panel-dev

🔥 MaxKB is an open-source platform for building enterprise-grade agents. 强大易用的开源企业级智能体平台。

22.0K

The Living Bread

A free remote MCP server for The Living Bread. Bible passages read word for word from a stored public domain text with an evidence label, keyword search and cross references, real churches, gatherings and prayer groups w