Have I Been Pwned MCP Tools
Have I Been Pwned exposes 17 tools. Each one has its own page with the configuration for every client that can run this server.
-
hibp_list_breacheshibp list breaches
-
hibp_get_breachhibp get breach
-
hibp_get_latest_breachhibp get latest breach
-
hibp_list_data_classeshibp list data classes
-
hibp_get_pwned_passwords_rangehibp get pwned passwords range
-
hibp_get_breached_accounthibp get breached account
-
hibp_get_breached_account_rangehibp get breached account range
-
hibp_get_paste_accounthibp get paste account
-
hibp_get_breached_domainhibp get breached domain
-
hibp_list_subscribed_domainshibp list subscribed domains
-
hibp_get_subscription_statushibp get subscription status
-
hibp_get_stealer_logs_by_emailhibp get stealer logs by email
-
hibp_get_stealer_logs_by_website_domainhibp get stealer logs by website domain
-
hibp_get_stealer_logs_by_email_domainhibp get stealer logs by email domain
-
hibp_generate_domain_verification_dns_tokenhibp generate domain verification dns token
-
hibp_verify_domain_verification_dns_tokenhibp verify domain verification dns token
-
hibp_send_domain_verification_emailhibp send domain verification email
This list was read from the server itself, by connecting to it and calling tools/list on 24 September 2026. It is what
the server actually exposes, not what its listing claims.
Mutating and Read-only are read off each tool's name, not its schema — a hint, not a guarantee. The registry stores tool names only; connect the server for its live schemas.