Have I Been Pwned MCP Server
Description
# Have I Been Pwned MCP Server [](https://smithery.ai/server/@Cyreslab-AI/hibp-mcp-server) A Model Context Protocol (MCP) server that provides integration with the [Have I Been…
About
# Have I Been Pwned MCP Server [](https://smithery.ai/server/@Cyreslab-AI/hibp-mcp-server) A Model Context Protocol (MCP) server that provides integration with the [Have I Been Pwned](https://haveibeenpwned.com/) API to check if your accounts or…
Details
- Author
- Cyreslab-AI
- Downloads
- 269
- Categories
- Developer Tools, Security, Other
Jump to
- Check if an email appears in known data breaches
- Check if a password has been exposed (using k‑anonymity)
- Get detailed information about a specific data breach
- List all breaches, optionally filtered by domain
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
Have I Been Pwned MCP ServerCommand (node, npx, python, etc.)Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
Install via Smithery or clone the repository, install dependencies, build, and configure the server in your MCP settings file with your HIBP_API_KEY environment variable. Once configured, use Claude or another MCP client to invoke the tools: check_email, check_password, get_breach_details, or list_all_breaches.
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"have i been pwned mcp server": {
"hibp-mcp-server": {
"command": "npx",
"args": [
"-y",
"@smithery/cli",
"install",
"@Cyreslab-AI/hibp-mcp-server",
"--client",
"claude"
]
}
}
}
}McpServers
{
"hibp-mcp-server": {
"command": "npx",
"args": [
"-y",
"@smithery/cli",
"install",
"@Cyreslab-AI/hibp-mcp-server",
"--client",
"claude"
]
}
}Check if an account or password has been compromised in a data breach using the Have I Been Pwned API.
A Model Context Protocol (MCP) server that provides integration with theHave I Been PwnedAPI to check if your accounts or passwords have been compromised in data breaches.
This MCP server provides four main tools:
- check_email: Check if an email address has been found in data breaches
- check_password: Check if a password has been exposed in data breaches (using k-anonymity)
- get_breach_details: Get detailed information about a specific data breach
- list_all_breaches: List all breaches in the system, optionally filtered by domain
To install hibp-mcp-server for Claude Desktop automatically viaSmithery:
npx -y @smithery/cli install @Cyreslab-AI/hibp-mcp-server --client claude
- Node.js (v14 or higher)
- npm (v6 or higher)
- A Have I Been Pwned API key (get one athaveibeenpwned.com/API/Key)
git clone https://github.com/Cyreslab-AI/hibp-mcp-server.git cd hibp-mcp-server
Configure the server in your MCP settings file:
For Claude VSCode extension, add to~/Library/Application Support/Code/User/globalStorage/saoudrizwan.claude-dev/settings/cline_mcp_settings.json:
{ "mcpServers": { "hibp": { "command": "node", "args": ["/path/to/hibp-mcp-server/build/index.js"], "env": { "HIBP_API_KEY": "YOUR_API_KEY_HERE" }, "disabled": false, "autoApprove": [] } } }
For Claude desktop app, add to~/Library/Application Support/Claude/claude_desktop_config.json(macOS) or similar path on other platforms.
Once the server is configured, you can use it with Claude to check for data breaches:
User: Has my email address example@gmail.com been pwned? Claude: Good news! This email address has not been found in any known data breaches.
User: Has my email address breached@example.com been pwned? Claude: ⚠️ This email address was found in 3 data breaches. Breach details: 1. Adobe (2013-10-04) Domain: adobe.com Description: In October 2013, 153 million Adobe accounts were breached... Compromised data: Email addresses, Password hints, Passwords, Usernames 2. LinkedIn (2012-05-05) Domain: linkedin.com Description: In May 2016, LinkedIn had 164 million email addresses and passwords exposed... Compromised data: Email addresses, Passwords 3. Dropbox (2012-07-01) Domain: dropbox.com Description: In mid-2012, Dropbox suffered a data breach which exposed... Compromised data: Email addresses, Passwords Recommendations: - Change your password for these services immediately - If you used the same password elsewhere, change those too - Enable two-factor authentication where available - Consider using a password manager
User: Has the password "password123" been exposed in any breaches? Claude: ⚠️ This password has been exposed in data breaches 123,456 times! Recommendations: - Stop using this password immediately - Change it on any site where you use it - Use a unique, strong password for each account - Consider using a password manager
User: Tell me about the LinkedIn data breach Claude: # LinkedIn Data Breach Date: 2012-05-05 Domain: linkedin.com Accounts affected: 164,611,595 Verified: Yes Data leaked: Email addresses, Passwords Description: In May 2016, LinkedIn had 164 million email addresses and passwords exposed. Originally hacked in 2012, the data remained out of sight until being offered for sale on a dark market site 4 years later. The passwords in the breach were stored as SHA1 hashes without salt, the vast majority of which were quickly cracked in the days following the release of the data. Recommendations: - If you had an account on this service, change your password - If you used the same password elsewhere, change those too - Monitor your accounts for suspicious activity - Be cautious of phishing attempts that may use this leaked information
User: List all Adobe data breaches Claude: Found 1 breaches for domain adobe.com: 1. Adobe (2013-10-04) Domain: adobe.com Accounts affected: 152,445,165 Compromised data: Email addresses, Password hints, Passwords, Usernames
- The password checking feature uses k-anonymity to check passwords without sending the full password to the Have I Been Pwned API
- Only the first 5 characters of the SHA-1 hash of the password are sent to the API
- The API returns a list of hash suffixes that match the prefix, and the check is completed locally
This server requires a Have I Been Pwned API key to function for most features (except password checking). You can get an API key athaveibeenpwned.com/API/Key.
The API key should be provided as an environment variable namedHIBP_API_KEYin your MCP settings configuration.
This is a web browser that enables your coding agent, such as Claude Code, to visit websites on your behalf and assist you in identifying bugs or creating UI test cases.
Discover mobile app attack surfaces via BeVigil OSINT — hosts, subdomains, URLs, and more.
Interact with Binalyze AIR's digital forensics and incident response capabilities using natural language.
Manage threat models, components, and security data on the Devici platform.
Performs data enrichment on observables using third-party services via the security-cli Python package.
Exploit Intelligence Platform MCP Server
An MCP (Model Context Protocol) server that gives AI assistants access to the Exploit Intelligence Platform — hundreds of thousands of vulnerabilities and exploits from NVD, CISA KEV, VulnCheck KEV, InTheWild.io, ENISA EUVD, OSV.dev, EPSS, ExploitDB, Metasploit, GitHub, and more. I
An AI-powered threat intelligence analysis tool for multi-source IOC analysis, APT attribution, and interactive reporting.
Interface with Malware Bazaar to get real-time threat intelligence and sample metadata for cybersecurity research.
An MCP server for memory forensics using the Volatility 3 framework.
Open-source, self-hostable MCP server for WhisperGraph — a graph of 7.39B nodes / 39B edges mapping DNS, BGP, GeoIP, WHOIS, and threat intelligence. Six read-only tools (Cypher query + schema introspection + threat assessment), six resources, eight investigation prompts. stdio and Streamable HTTP transports.
A Model Context Protocol (MCP) server implementation that provides seamless integration with the AbuseIPDB API for IP reputation checking and abuse report management.
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
