Connection check
verified live · 26h ago
hibp-2
Breach intelligence API: email search, domain monitoring, passwords and stealer logs.
Tools
17
GitHub stars
—
Installs / wk
—
Licence
—
Transport
streamable-http
Last checked
26h ago
Tools & capabilities
17 toolsRead from the running server on 26h ago.
hibp_generate_domain_verification_dns_token
domain*response_format
Generate the TXT record value required to verify domain control via DNS, creating or reusing the private HIBP domain-verification records needed for the request. Requires an authen… Generate the TXT record value required to verify domain control via DNS, creating or reusing the private HIBP domain-verification records needed for the request. Requires an authenticated subscription with domain-verification access.
hibp_get_breach
read-only
name*response_format
Look up a single public HIBP breach by its canonical breach name, such as Adobe. Look up a single public HIBP breach by its canonical breach name, such as Adobe.
hibp_get_breached_account
read-only
limitdomainoffsetaccount*responseModeresponse_format
+1
Search HIBP for breaches affecting a single email address. Requires an OAuth bearer token linked to an active HIBP API subscription; use domain and verification filters to refine t… Search HIBP for breaches affecting a single email address. Requires an OAuth bearer token linked to an active HIBP API subscription; use domain and verification filters to refine the result.
hibp_get_breached_account_range
read-only
limitoffsetprefix*response_format
Query the authenticated HIBP k-anonymity breached-account range endpoint with the first 6 characters of a SHA-1 email hash. Requires a subscription with k-anonymity access; compare… Query the authenticated HIBP k-anonymity breached-account range endpoint with the first 6 characters of a SHA-1 email hash. Requires a subscription with k-anonymity access; compare each returned suffix with the remaining hash characters locally because a prefix alone cannot identify an account.
hibp_get_breached_domain
read-only
limitdomain*offsetresponse_format
Return breached aliases for a verified domain. This tool requires an authorized subscription via OAuth bearer token. Return breached aliases for a verified domain. This tool requires an authorized subscription via OAuth bearer token.
hibp_get_latest_breach
read-only
response_format
Return the most recently added public breach currently loaded into HIBP. Return the most recently added public breach currently loaded into HIBP.
hibp_get_paste_account
read-only
limitoffsetaccount*response_format
Search for public pastes containing a single email address. Requires an OAuth bearer token linked to an active HIBP API subscription; run this separately from breached-account look… Search for public pastes containing a single email address. Requires an OAuth bearer token linked to an active HIBP API subscription; run this separately from breached-account lookup.
hibp_get_pwned_passwords_range
read-only
modelimitoffsetprefix*addPaddingresponse_format
Query the public Pwned Passwords k-anonymity API with a 5-character SHA-1 or NTLM prefix and return matching suffixes with prevalence counts. Query the public Pwned Passwords k-anonymity API with a 5-character SHA-1 or NTLM prefix and return matching suffixes with prevalence counts.
hibp_get_stealer_logs_by_email
read-only
email*limitoffsetresponse_format
Return website domains historically observed in stealer logs for an email address. Requires an OAuth-linked active subscription with the stealer-log feature; results do not establi… Return website domains historically observed in stealer logs for an email address. Requires an OAuth-linked active subscription with the stealer-log feature; results do not establish current account access.
hibp_get_stealer_logs_by_email_domain
read-only
limitdomain*offsetresponse_format
Return email aliases and associated website domains historically observed in stealer logs for an email domain. Requires an OAuth-linked active subscription with the stealer-log fea… Return email aliases and associated website domains historically observed in stealer logs for an email domain. Requires an OAuth-linked active subscription with the stealer-log feature; results do not establish current account access.
hibp_get_stealer_logs_by_website_domain
read-only
limitdomain*offsetresponse_format
Return email addresses historically observed in stealer logs for a website domain. Requires an OAuth-linked active subscription with the stealer-log feature; results do not establi… Return email addresses historically observed in stealer logs for a website domain. Requires an OAuth-linked active subscription with the stealer-log feature; results do not establish current account access.
hibp_get_subscription_status
read-only
response_format
Return the current plan, quotas, rate limits, expiry, and feature flags for the active HIBP API subscription linked to the authenticated OAuth connection. Use it to confirm access… Return the current plan, quotas, rate limits, expiry, and feature flags for the active HIBP API subscription linked to the authenticated OAuth connection. Use it to confirm access before feature-dependent lookups.
hibp_list_breaches
read-only
limitdomainoffsetisSpamListresponse_formatincludeUnverified
List public HIBP breaches, optionally filtered by domain, spam-list flag, and verification status. List public HIBP breaches, optionally filtered by domain, spam-list flag, and verification status.
hibp_list_data_classes
read-only
response_format
List the data classes used across public HIBP breach models, such as email addresses or passwords. List the data classes used across public HIBP breach models, such as email addresses or passwords.
hibp_list_subscribed_domains
read-only
limitoffsetresponse_format
List the domains associated with the authenticated HIBP subscription. List the domains associated with the authenticated HIBP subscription.
hibp_send_domain_verification_email
can modify data
domain*emailAlias*response_format
Send a domain verification email to an approved alias such as admin or security. Requires an authenticated subscription with domain-verification access. Send a domain verification email to an approved alias such as admin or security. Requires an authenticated subscription with domain-verification access.
hibp_verify_domain_verification_dns_token
domain*response_format