List public HIBP breaches, optionally filtered by domain, spam-list flag, and verification status.
hibp_get_breach
Look up a single public HIBP breach by its canonical breach name, such as Adobe.
hibp_get_latest_breach
Return the most recently added public breach currently loaded into HIBP.
hibp_list_data_classes
List the data classes used across public HIBP breach models, such as email addresses or passwords.
hibp_get_pwned_passwords_range
Query the public Pwned Passwords k-anonymity API with a 5-character SHA-1 or NTLM prefix and return matching suffixes with prevalence counts.
hibp_get_breached_account
Search HIBP for breaches affecting a single email address. This tool requires an OAuth bearer token.
hibp_get_breached_account_range
Query the authenticated HIBP k-anonymity breached-account range endpoint with the first 6 characters of a SHA-1 email hash.
hibp_get_paste_account
Search for public pastes containing an email address. This tool requires an OAuth bearer token.
hibp_get_breached_domain
Return breached aliases for a verified domain. This tool requires an authorized subscription via OAuth bearer token.
hibp_list_subscribed_domains
List the domains associated with the authenticated HIBP subscription.
hibp_get_subscription_status
Return the current subscription details and feature flags for the authenticated OAuth-linked HIBP subscription.
hibp_get_stealer_logs_by_email
Return website domains observed in stealer logs for an email address. Requires an authenticated subscription with stealer-log access.
hibp_get_stealer_logs_by_website_domain
Return email addresses observed in stealer logs for a website domain. Requires an authenticated subscription with stealer-log access.
hibp_get_stealer_logs_by_email_domain
Return email aliases and associated website domains observed in stealer logs for an email domain. Requires an authenticated subscription with stealer-log access.
hibp_generate_domain_verification_dns_token
Generate the TXT record value required to verify domain control via DNS. Requires an authenticated subscription with domain-verification access.
hibp_verify_domain_verification_dns_token
Complete domain verification by checking the expected HIBP TXT record on the target domain. Requires an authenticated subscription with domain-verification access.
hibp_send_domain_verification_email
Send a domain verification email to an approved alias such as admin or security. Requires an authenticated subscription with domain-verification access.
Endpoint
https://haveibeenpwned.com/mcp Category: Communication · Last checked: 2026-08-15T10:14:43Z
Monitor your own MCP server
Get alerted the moment yours goes down, a tool schema drifts, or an upstream silently breaks.
What this means. This server responded to the MCP handshake and listed its tools without authentication. The schema fingerprint lets us flag if tool signatures silently change (schema drift) between checks.