Have I Been Pwned for Windsurf
io.github.troyhunt/hibp
Breach intelligence API: email search, domain monitoring, passwords and stealer logs.
client:Windsurf
transport:streamable-http
tools:17
Install Have I Been Pwned in Windsurf
~/.codeium/windsurf/mcp_config.json · windows: %USERPROFILE%\.codeium\windsurf\mcp_config.json
{
"mcpServers": {
"hibp": {
"serverUrl": "https://haveibeenpwned.com/mcp"
}
}
}
Global only — Windsurf has no per-project MCP config. Refresh Cascade after saving. Windsurf docs
What Windsurf can do once it is connected
- hibp_list_breaches
- hibp_get_breach
- hibp_get_latest_breach
- hibp_list_data_classes
- hibp_get_pwned_passwords_range
- hibp_get_breached_account
- hibp_get_breached_account_range
- hibp_get_paste_account
- hibp_get_breached_domain
- hibp_list_subscribed_domains
- hibp_get_subscription_status
- hibp_get_stealer_logs_by_email
- hibp_get_stealer_logs_by_website_domain
- hibp_get_stealer_logs_by_email_domain
- hibp_generate_domain_verification_dns_token
- hibp_verify_domain_verification_dns_token
- hibp_send_domain_verification_email