Have I Been Pwned MCP Server

@MCP-Mirror

代码仓库

基本信息

分类

其他

许可证

MIT license

传输方式

stdio

作者

MCP-Mirror

关于 Have I Been Pwned MCP Server

Mirror of

Have I Been Pwned MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "Cyreslab-AI_hibp-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@smithery/cli",
        "install",
        "@Cyreslab-AI/hibp-mcp-server",
        "--client",
        "claude"
      ]
    }
  }
}

Have I Been Pwned MCP Server 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

点击上方按钮,在临时沙箱中运行此服务器并实时获取工具列表。

概览

What is Have I Been Pwned MCP Server?

A Model Context Protocol (MCP) server that integrates with the Have I Been Pwned API to check if email addresses or passwords have been compromised in data breaches. It provides tools for querying breaches, getting details, and listing all breaches.

How to use Have I Been Pwned MCP Server?

Install via Smithery or clone the repository, run npm install and npm run build, then configure the server in your MCP settings file (e.g., for Claude Desktop) with a HIBP_API_KEY environment variable. Use the tools check_email, check_password, get_breach_details, and list_all_breaches through your MCP client.

Key features of Have I Been Pwned MCP Server

Check if an email appears in known data breaches.
Check if a password has been exposed using k-anonymity.
Get detailed information about a specific breach.
List all breaches, optionally filtered by domain.
Password checking does not require an API key.
Privacy: only partial password hash sent to the API.

Use cases of Have I Been Pwned MCP Server

Verifying if a user's email was part of a recent breach.
Checking if a password has appeared in credential leaks.
Auditing multiple accounts against known breaches.
Investigating specific breach details for security reports.
Integrating breach awareness into chatbot workflows.

常见问题

What are the runtime requirements?

Node.js v14 or higher and npm v6 or higher. A Have I Been Pwned API key is required for most features (except password checking).

How does password checking work without sending the full password?

The server uses k-anonymity: only the first 5 characters of the SHA-1 hash of the password are sent to the API. The API returns matching hash suffixes, and the check is completed locally.

What tools does the server provide?

Four tools: `check_email`, `check_password`, `get_breach_details`, and `list_all_breaches`.

Where can I get a Have I Been Pwned API key?

Get one at [haveibeenpwned.com/API/Key](https://haveibeenpwned.com/API/Key).

How do I configure the server with my MCP client?

In your MCP settings file (e.g., `claude_desktop_config.json`), add the server with the command `node`, path to the built `index.js`, and set the environment variable `HIBP_API_KEY` to your API key.

其他分类下的更多 MCP 服务器

Glasswarp

See and control a real Windows PC you own — from any MCP client, locally or remotely. Observe (UIA + screenshots), click/type/drag/scroll, launch apps, owner Live View. BYOH: your machine, your key.

Hindsight

vectorize-io

Hindsight: Agent Memory That Learns

50.4K

EverArt

modelcontextprotocol

Model Context Protocol Servers

88.1K

Maestro

mobile-dev-inc

Painless E2E Automation for Mobile and Web

14.8K

Next Generation Movers: free moving quotes (remote MCP)

Next Generation Movers

Free moving quotes for AI agents from Next Generation Movers, a licensed interstate mover (USDOT 3764697). US long-distance nationwide and local DC/MD/VA. Indicative ballpark price and booking options; optional $0.01 x40