Have I Been Pwned

Name: Have I Been Pwned
Author: troyhunt

MCP serverMCP

Breach intelligence API: email search, domain monitoring, passwords and stealer logs.

by troyhuntv1.0.0

Is this yours?

This record is unclaimed

Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.

Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"have-i-been-pwned","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.

Claim this record

Observed by Wellknown

Evidence

Everything here was measured by our prober or read from a registry. Nothing is self-reported.

30-day availability5/5 checks ok

30 days ago

when	check	result	http	latency	detail
5 h ago	mcp initialize	ok	200	71 ms	server hibp-mcp-server 0.0.0 · protocol 2025-06-18 · 17 tools
12 h ago	mcp initialize	ok	200	55 ms	server hibp-mcp-server 0.0.0 · protocol 2025-06-18 · 17 tools
19 h ago	mcp initialize	ok	200	22 ms	server hibp-mcp-server 0.0.0 · protocol 2025-06-18 · 17 tools
26 h ago	mcp initialize	ok	200	117 ms	server hibp-mcp-server 0.0.0 · protocol 2025-06-18 · 17 tools
33 h ago	mcp initialize	ok	200	66 ms	server hibp-mcp-server 0.0.0 · protocol 2025-06-18 · 17 tools
2 d ago	mcp initialize	ok	200	57 ms	server hibp-mcp-server 0.0.0 · protocol 2025-06-18 · 17 tools

Tools observed via MCP handshake

hibp_list_breaches — List public HIBP breaches, optionally filtered by domain, spam-list flag, and verification status.
hibp_get_breach — Look up a single public HIBP breach by its canonical breach name, such as Adobe.
hibp_get_latest_breach — Return the most recently added public breach currently loaded into HIBP.
hibp_list_data_classes — List the data classes used across public HIBP breach models, such as email addresses or passwords.
hibp_get_pwned_passwords_range — Query the public Pwned Passwords k-anonymity API with a 5-character SHA-1 or NTLM prefix and return matching suffixes with prevalence counts.
hibp_get_breached_account — Search HIBP for breaches affecting a single email address. Requires an OAuth bearer token linked to an active HIBP API subscription; use domain and verification
hibp_get_breached_account_range — Query the authenticated HIBP k-anonymity breached-account range endpoint with the first 6 characters of a SHA-1 email hash. Requires a subscription with k-anony
hibp_get_paste_account — Search for public pastes containing a single email address. Requires an OAuth bearer token linked to an active HIBP API subscription; run this separately from b
hibp_get_breached_domain — Return breached aliases for a verified domain. This tool requires an authorized subscription via OAuth bearer token.
hibp_list_subscribed_domains — List the domains associated with the authenticated HIBP subscription.
hibp_get_subscription_status — Return the current plan, quotas, rate limits, expiry, and feature flags for the active HIBP API subscription linked to the authenticated OAuth connection. Use i
hibp_get_stealer_logs_by_email — Return website domains historically observed in stealer logs for an email address. Requires an OAuth-linked active subscription with the stealer-log feature; re
hibp_get_stealer_logs_by_website_domain — Return email addresses historically observed in stealer logs for a website domain. Requires an OAuth-linked active subscription with the stealer-log feature; re
hibp_get_stealer_logs_by_email_domain — Return email aliases and associated website domains historically observed in stealer logs for an email domain. Requires an OAuth-linked active subscription with
hibp_generate_domain_verification_dns_token — Generate the TXT record value required to verify domain control via DNS, creating or reusing the private HIBP domain-verification records needed for the request
hibp_verify_domain_verification_dns_token — Complete domain verification by checking the expected HIBP TXT record on the target domain. Requires an authenticated subscription with domain-verification acce
hibp_send_domain_verification_email — Send a domain verification email to an approved alias such as admin or security. Requires an authenticated subscription with domain-verification access.

Provenance

Where this record came from

Every source is kept verbatim. Field changes are logged as events.

Official MCP Registryio.github.troyhunt/hibp

first seen 2 d ago · fetched 2 d agoopen ↗

Field history (5 recent events)

2 d ago · declared · summary → "Breach intelligence API: email search, domain monitoring, passwords and stealer logs."
2 d ago · declared · description → "Breach intelligence API: email search, domain monitoring, passwords and stealer logs."
2 d ago · declared · publisherName → "troyhunt"
2 d ago · declared · version → "1.0.0"
2 d ago · declared · protocols → ["mcp"]

Have I Been Pwned

This record is unclaimed

Evidence

What the publisher says

Capabilities

Where this record came from