{"apiVersion":"v1","directorySlug":"haveibeenpwned-mcp-2a78f4e192","title":"Have I Been Pwned","description":"Have I Been Pwned (HIBP) is a data breach search and notification service used by security teams, developers, and MSPs worldwide. Search tens of billions of breached records, monitor corporate domains via API, and get alerted when new breaches appear.","pageUrl":"https://www.mcpbundles.com/skills/haveibeenpwned-mcp-2a78f4e192","connectPath":"importable","connectAction":"import_server","catalogListing":false,"bundleSlug":null,"listingKind":"remote_mcp","kind":"provider","transportUrl":"https://haveibeenpwned.com/mcp","hostedMcpUrl":null,"toolCount":17,"toolInventoryStatus":"observed","refreshedAt":"2026-11-03T13:26:00.516172+00:00","registryName":"com.haveibeenpwned/haveibeenpwned-mcp-2a78f4e192","registryVersion":"2026.11.3","registryEligible":true,"tools":[{"name":"hibp_list_breaches","description":"List public HIBP breaches, optionally filtered by domain, spam-list flag, and verification status.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"limit":{"type":"integer","default":25,"maximum":100,"minimum":1},"domain":{"type":"string"},"offset":{"type":"integer","default":0,"maximum":9007199254740991,"minimum":0},"isSpamList":{"type":"boolean"},"response_format":{"enum":["markdown","json"],"type":"string","default":"markdown"},"includeUnverified":{"type":"boolean","default":true}}},"title":"Have I Been Pwned - Breaches","annotations":{"readOnlyHint":true,"untrustedContentHint":true},"logicalName":"hibp_list_breaches","displayName":"Have I Been Pwned - Breaches"},{"name":"hibp_get_breach","description":"Look up a single public HIBP breach by its canonical breach name, such as Adobe.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["name"],"properties":{"name":{"type":"string"},"response_format":{"enum":["markdown","json"],"type":"string","default":"markdown"}}},"title":"Have I Been Pwned - Breach","annotations":{"readOnlyHint":true,"untrustedContentHint":true},"logicalName":"hibp_get_breach","displayName":"Have I Been Pwned - Breach"},{"name":"hibp_get_latest_breach","description":"Return the most recently added public breach currently loaded into HIBP.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"response_format":{"enum":["markdown","json"],"type":"string","default":"markdown"}}},"title":"Have I Been Pwned - Latest Breach","annotations":{"readOnlyHint":true,"untrustedContentHint":true},"logicalName":"hibp_get_latest_breach","displayName":"Have I Been Pwned - Latest Breach"},{"name":"hibp_list_data_classes","description":"List the data classes used across public HIBP breach models, such as email addresses or passwords.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"response_format":{"enum":["markdown","json"],"type":"string","default":"markdown"}}},"title":"Have I Been Pwned - Data Classes","annotations":{"readOnlyHint":true,"untrustedContentHint":true},"logicalName":"hibp_list_data_classes","displayName":"Have I Been Pwned - Data Classes"},{"name":"hibp_get_pwned_passwords_range","description":"Query the public Pwned Passwords k-anonymity API with a 5-character SHA-1 or NTLM prefix and return matching suffixes with prevalence counts.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["prefix"],"properties":{"mode":{"enum":["sha1","ntlm"],"type":"string","default":"sha1"},"limit":{"type":"integer","default":25,"maximum":100,"minimum":1},"offset":{"type":"integer","default":0,"maximum":9007199254740991,"minimum":0},"prefix":{"type":"string","pattern":"^[0-9A-Fa-f]{5}$"},"addPadding":{"type":"boolean","default":false},"response_format":{"enum":["markdown","json"],"type":"string","default":"markdown"}}},"title":"Pwned Passwords Range Search","annotations":{"readOnlyHint":true,"untrustedContentHint":true},"logicalName":"hibp_get_pwned_passwords_range","displayName":"Pwned Passwords Range Search"},{"name":"hibp_get_breached_account","description":"Search HIBP for breaches affecting a single email address. Requires an OAuth bearer token linked to an active HIBP API subscription; use domain and verification filters to refine the result.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["account"],"properties":{"limit":{"type":"integer","default":25,"maximum":100,"minimum":1},"domain":{"type":"string"},"offset":{"type":"integer","default":0,"maximum":9007199254740991,"minimum":0},"account":{"type":"string"},"responseMode":{"enum":["full","truncated","names"],"type":"string","default":"full"},"response_format":{"enum":["markdown","json"],"type":"string","default":"markdown"},"includeUnverified":{"type":"boolean","default":true}}},"title":"Have I Been Pwned - Breached Account","annotations":{"readOnlyHint":true,"untrustedContentHint":true},"logicalName":"hibp_get_breached_account","displayName":"Have I Been Pwned - Breached Account"},{"name":"hibp_get_breached_account_range","description":"Query the authenticated HIBP k-anonymity breached-account range endpoint with the first 6 characters of a SHA-1 email hash. Requires a subscription with k-anonymity access; compare each returned suffix with the remaining hash characters locally because a prefix alone cannot identify an account.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["prefix"],"properties":{"limit":{"type":"integer","default":25,"maximum":100,"minimum":1},"offset":{"type":"integer","default":0,"maximum":9007199254740991,"minimum":0},"prefix":{"type":"string","pattern":"^[0-9A-Fa-f]{6}$"},"response_format":{"enum":["markdown","json"],"type":"string","default":"markdown"}}},"title":"Have I Been Pwned - Breached Account Range","annotations":{"readOnlyHint":true,"untrustedContentHint":true},"logicalName":"hibp_get_breached_account_range","displayName":"Have I Been Pwned - Breached Account Range"},{"name":"hibp_get_paste_account","description":"Search for public pastes containing a single email address. Requires an OAuth bearer token linked to an active HIBP API subscription; run this separately from breached-account lookup.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["account"],"properties":{"limit":{"type":"integer","default":25,"maximum":100,"minimum":1},"offset":{"type":"integer","default":0,"maximum":9007199254740991,"minimum":0},"account":{"type":"string"},"response_format":{"enum":["markdown","json"],"type":"string","default":"markdown"}}},"title":"Have I Been Pwned - Paste Account","annotations":{"readOnlyHint":true,"untrustedContentHint":true},"logicalName":"hibp_get_paste_account","displayName":"Have I Been Pwned - Paste Account"},{"name":"hibp_get_breached_domain","description":"Return breached aliases for a verified domain. This tool requires an authorized subscription via OAuth bearer token.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["domain"],"properties":{"limit":{"type":"integer","default":25,"maximum":100,"minimum":1},"domain":{"type":"string"},"offset":{"type":"integer","default":0,"maximum":9007199254740991,"minimum":0},"response_format":{"enum":["markdown","json"],"type":"string","default":"markdown"}}},"title":"Have I Been Pwned - Breached Domain","annotations":{"readOnlyHint":true,"untrustedContentHint":true},"logicalName":"hibp_get_breached_domain","displayName":"Have I Been Pwned - Breached Domain"},{"name":"hibp_list_subscribed_domains","description":"List the domains associated with the authenticated HIBP subscription.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"limit":{"type":"integer","default":25,"maximum":100,"minimum":1},"offset":{"type":"integer","default":0,"maximum":9007199254740991,"minimum":0},"response_format":{"enum":["markdown","json"],"type":"string","default":"markdown"}}},"title":"Have I Been Pwned - Subscribed Domains","annotations":{"readOnlyHint":true,"untrustedContentHint":true},"logicalName":"hibp_list_subscribed_domains","displayName":"Have I Been Pwned - Subscribed Domains"},{"name":"hibp_get_subscription_status","description":"Return the current plan, quotas, rate limits, expiry, and feature flags for the active HIBP API subscription linked to the authenticated OAuth connection. Use it to confirm access before feature-dependent lookups.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"response_format":{"enum":["markdown","json"],"type":"string","default":"markdown"}}},"title":"Have I Been Pwned - Subscription Status","annotations":{"readOnlyHint":true,"untrustedContentHint":true},"logicalName":"hibp_get_subscription_status","displayName":"Have I Been Pwned - Subscription Status"},{"name":"hibp_get_stealer_logs_by_email","description":"Return website domains historically observed in stealer logs for an email address. Requires an OAuth-linked active subscription with the stealer-log feature; results do not establish current account access.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["email"],"properties":{"email":{"type":"string"},"limit":{"type":"integer","default":25,"maximum":100,"minimum":1},"offset":{"type":"integer","default":0,"maximum":9007199254740991,"minimum":0},"response_format":{"enum":["markdown","json"],"type":"string","default":"markdown"}}},"title":"Have I Been Pwned - Stealer Logs by Email","annotations":{"readOnlyHint":true,"untrustedContentHint":true},"logicalName":"hibp_get_stealer_logs_by_email","displayName":"Have I Been Pwned - Stealer Logs by Email"},{"name":"hibp_get_stealer_logs_by_website_domain","description":"Return email addresses historically observed in stealer logs for a website domain. Requires an OAuth-linked active subscription with the stealer-log feature; results do not establish current account access.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["domain"],"properties":{"limit":{"type":"integer","default":25,"maximum":100,"minimum":1},"domain":{"type":"string"},"offset":{"type":"integer","default":0,"maximum":9007199254740991,"minimum":0},"response_format":{"enum":["markdown","json"],"type":"string","default":"markdown"}}},"title":"Have I Been Pwned - Stealer Logs by Website Domain","annotations":{"readOnlyHint":true,"untrustedContentHint":true},"logicalName":"hibp_get_stealer_logs_by_website_domain","displayName":"Have I Been Pwned - Stealer Logs by Website Domain"},{"name":"hibp_get_stealer_logs_by_email_domain","description":"Return email aliases and associated website domains historically observed in stealer logs for an email domain. Requires an OAuth-linked active subscription with the stealer-log feature; results do not establish current account access.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["domain"],"properties":{"limit":{"type":"integer","default":25,"maximum":100,"minimum":1},"domain":{"type":"string"},"offset":{"type":"integer","default":0,"maximum":9007199254740991,"minimum":0},"response_format":{"enum":["markdown","json"],"type":"string","default":"markdown"}}},"title":"Have I Been Pwned - Stealer Logs by Email Domain","annotations":{"readOnlyHint":true,"untrustedContentHint":true},"logicalName":"hibp_get_stealer_logs_by_email_domain","displayName":"Have I Been Pwned - Stealer Logs by Email Domain"},{"name":"hibp_generate_domain_verification_dns_token","description":"Generate the TXT record value required to verify domain control via DNS, creating or reusing the private HIBP domain-verification records needed for the request. Requires an authenticated subscription with domain-verification access.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["domain"],"properties":{"domain":{"type":"string"},"response_format":{"enum":["markdown","json"],"type":"string","default":"markdown"}}},"title":"Have I Been Pwned - Generate Domain Verification DNS Token","logicalName":"hibp_generate_domain_verification_dns_token","displayName":"Have I Been Pwned - Generate Domain Verification DNS Token","annotations":{"untrustedContentHint":true,"readOnlyHint":true}},{"name":"hibp_verify_domain_verification_dns_token","description":"Complete domain verification by checking the expected HIBP TXT record on the target domain. Requires an authenticated subscription with domain-verification access.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["domain"],"properties":{"domain":{"type":"string"},"response_format":{"enum":["markdown","json"],"type":"string","default":"markdown"}}},"title":"Have I Been Pwned - Verify Domain Verification DNS Token","logicalName":"hibp_verify_domain_verification_dns_token","displayName":"Have I Been Pwned - Verify Domain Verification DNS Token","annotations":{"untrustedContentHint":true,"readOnlyHint":true}},{"name":"hibp_send_domain_verification_email","description":"Send a domain verification email to an approved alias such as admin or security. Requires an authenticated subscription with domain-verification access.","inputSchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["domain","emailAlias"],"properties":{"domain":{"type":"string"},"emailAlias":{"type":"string"},"response_format":{"enum":["markdown","json"],"type":"string","default":"markdown"}}},"title":"Have I Been Pwned - Send Domain Verification Email","logicalName":"hibp_send_domain_verification_email","displayName":"Have I Been Pwned - Send Domain Verification Email","annotations":{"untrustedContentHint":true,"readOnlyHint":true}}],"toolSource":"directory_preview","agentAction":"both","installLinks":[{"id":"cursor","label":"Cursor","href":"cursor://anysphere.cursor-deeplink/mcp/install?name=Have-I-Been-Pwned&config=eyJ1cmwiOiAiaHR0cHM6Ly9oYXZlaWJlZW5wd25lZC5jb20vbWNwIn0%3D"},{"id":"vscode","label":"VS Code","href":"vscode:mcp/install?%7B%22name%22%3A%22Have-I-Been-Pwned%22%2C%22type%22%3A%22http%22%2C%22url%22%3A%22https%3A%2F%2Fhaveibeenpwned.com%2Fmcp%22%7D"},{"id":"vscode-insiders","label":"VS Code Insiders","href":"vscode-insiders:mcp/install?%7B%22name%22%3A%22Have-I-Been-Pwned%22%2C%22type%22%3A%22http%22%2C%22url%22%3A%22https%3A%2F%2Fhaveibeenpwned.com%2Fmcp%22%7D"},{"id":"claude-web","label":"Claude.ai","href":"https://claude.ai/customize/connectors?modal=add-custom-connector&connectorName=Have+I+Been+Pwned&connectorUrl=https%3A%2F%2Fhaveibeenpwned.com%2Fmcp"},{"id":"codex","label":"Codex","copyText":"codex mcp add \"Have-I-Been-Pwned\" --url \"https://haveibeenpwned.com/mcp\""},{"id":"chatgpt","label":"ChatGPT","href":"https://www.mcpbundles.com/docs/integrations/chatgpt"}],"catalogUrl":"https://www.mcpbundles.com/api/directory/v1/servers/haveibeenpwned-mcp-2a78f4e192","callUrl":"https://www.mcpbundles.com/api/directory/v1/servers/haveibeenpwned-mcp-2a78f4e192/tools/{tool}","mcpServerUrl":"https://haveibeenpwned.com/mcp","liveCatalogUrl":"https://www.mcpbundles.com/api/directory/v1/servers/haveibeenpwned-mcp-2a78f4e192?live=1"}