Have I Been Pwned for Cursor
io.github.troyhunt/hibp
Breach intelligence API: email search, domain monitoring, passwords and stealer logs.
client:Cursor
transport:streamable-http
tools:17
Install Have I Been Pwned in Cursor
~/.cursor/mcp.json · windows: %USERPROFILE%\.cursor\mcp.json
{
"mcpServers": {
"hibp": {
"url": "https://haveibeenpwned.com/mcp"
}
}
}
Use .cursor/mcp.json in a project root instead to scope it to that project. Cursor merges both. Cursor docs
What Cursor can do once it is connected
- hibp_list_breaches
- hibp_get_breach
- hibp_get_latest_breach
- hibp_list_data_classes
- hibp_get_pwned_passwords_range
- hibp_get_breached_account
- hibp_get_breached_account_range
- hibp_get_paste_account
- hibp_get_breached_domain
- hibp_list_subscribed_domains
- hibp_get_subscription_status
- hibp_get_stealer_logs_by_email
- hibp_get_stealer_logs_by_website_domain
- hibp_get_stealer_logs_by_email_domain
- hibp_generate_domain_verification_dns_token
- hibp_verify_domain_verification_dns_token
- hibp_send_domain_verification_email