io.github.troyhunt/hibp

up checked 2026-11-11T04:38:20.731Z

Unclaimed · Unverified

Agent searches it appeared in, last 30 days: 0. Run this server? Claim the listing: verified label, uptime alerts and analytics.

Publisher-provided title

Have I Been Pwned

Publisher-provided description

Breach intelligence API: email search, domain monitoring, passwords and stealer logs.

Summary by lookupd

Searches breach, paste and stealer-log exposure for emails and domains, checks passwords against breach data, and manages domain…

Install

Claude Code, remote (streamable-http)

claude mcp add --transport http hibp https://haveibeenpwned.com/mcp

Codex, remote (streamable-http)

codex mcp add hibp --url https://haveibeenpwned.com/mcp

Cursor, remote (streamable-http) → .cursor/mcp.json

{
  "mcpServers": {
    "hibp": {
      "url": "https://haveibeenpwned.com/mcp"
    }
  }
}

Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.

Tools (17 tools)

Publisher-provided text

• hibp_list_breaches List public HIBP breaches, optionally filtered by domain, spam-list flag, and verification status.
• hibp_get_breach Look up a single public HIBP breach by its canonical breach name, such as Adobe.
• hibp_get_latest_breach Return the most recently added public breach currently loaded into HIBP.
• hibp_list_data_classes List the data classes used across public HIBP breach models, such as email addresses or passwords.
• hibp_get_pwned_passwords_range Query the public Pwned Passwords k-anonymity API with a 5-character SHA-1 or NTLM prefix and return matching suffixes with prevalence counts.
• hibp_get_breached_account Search HIBP for breaches affecting a single email address. Requires an OAuth bearer token linked to an active HIBP API subscription; use domain and verification
• hibp_get_breached_account_range Query the authenticated HIBP k-anonymity breached-account range endpoint with the first 6 characters of a SHA-1 email hash. Requires a subscription with k-anony
• hibp_get_paste_account Search for public pastes containing a single email address. Requires an OAuth bearer token linked to an active HIBP API subscription; run this separately from b
• hibp_get_breached_domain Return breached aliases for a verified domain. This tool requires an authorized subscription via OAuth bearer token.
• hibp_list_subscribed_domains List the domains associated with the authenticated HIBP subscription.
• hibp_get_subscription_status Return the current plan, quotas, rate limits, expiry, and feature flags for the active HIBP API subscription linked to the authenticated OAuth connection. Use i
• hibp_get_stealer_logs_by_email Return website domains historically observed in stealer logs for an email address. Requires an OAuth-linked active subscription with the stealer-log feature; re
• hibp_get_stealer_logs_by_website_domain Return email addresses historically observed in stealer logs for a website domain. Requires an OAuth-linked active subscription with the stealer-log feature; re
• hibp_get_stealer_logs_by_email_domain Return email aliases and associated website domains historically observed in stealer logs for an email domain. Requires an OAuth-linked active subscription with
• hibp_generate_domain_verification_dns_token Generate the TXT record value required to verify domain control via DNS, creating or reusing the private HIBP domain-verification records needed for the request
• hibp_verify_domain_verification_dns_token Complete domain verification by checking the expected HIBP TXT record on the target domain. Requires an authenticated subscription with domain-verification acce
• hibp_send_domain_verification_email Send a domain verification email to an approved alias such as admin or security. Requires an authenticated subscription with domain-verification access.

Details

• Version: 1.0.0
• Transports: streamable-http
• Uptime (7 days): 100%
• Median latency: 520 ms
• First indexed: 2026-11-01T09:58:29.911Z
• Last seen in registry: 2026-11-01T09:58:29.911Z

Badge for your README

Shows this live status and links here; updates hourly.

[![lookupd status](https://lookupd.com/badge/io.github.troyhunt/hibp.svg)](https://lookupd.com/servers/io.github.troyhunt/hibp)

• 62092 servers
• Last crawl: 2026-11-11T17:38:11.606Z
• API base: https://api.lookupd.com
• MCP URL: https://api.lookupd.com/mcp