Skip to content
LiciumTalk to usFor agentsSign in

MCP server list / Have I Been Pwned

Breach intelligence API: email search, domain monitoring, passwords and stealer logs.

Answered:

4 of 4 checks

Status
responds
Typical response time
137 ms
Last checked
Latest check:
This server answered at its latest check.Last checked  · MCP initialize · 8s limit · HTTP 200 · answered in 136 ms.
Need a different server, page or part?
Address
https://haveibeenpwned.com/mcp
Listed in:
official MCP registry mcp_registry
Registry name
io.github.troyhunt/hibp
Transport
streamable HTTP streamable-http
Host
haveibeenpwned.com

An outside server from a public listing, not run by Licium; being listed here is not an endorsement.

Register it as a part

What the server says about itself

We have not checked it.
Server name:
hibp-mcp-server
Version:
0.0.0
MCP features it lists:
resources, completions, prompts, tools
Tool names:
hibp_list_breacheshibp_get_breachhibp_get_latest_breachhibp_list_data_classeshibp_get_pwned_passwords_rangehibp_get_breached_accounthibp_get_breached_account_rangehibp_get_paste_accounthibp_get_breached_domainhibp_list_subscribed_domainshibp_get_subscription_statushibp_get_stealer_logs_by_email
and 5 morehibp_get_stealer_logs_by_website_domainhibp_get_stealer_logs_by_email_domainhibp_generate_domain_verification_dns_tokenhibp_verify_domain_verification_dns_tokenhibp_send_domain_verification_email

Reported Aug 17, 2026, 05:02 AM UTC.

Check history

oldest to newest; each row is one recorded check
Recorded checks for Have I Been Pwned
CheckedStatusTookCheck
responds32 msMCP initialize · 8s limit · HTTP 200
responds235 msMCP initialize · 8s limit · HTTP 200
responds138 msMCP initialize · 8s limit · HTTP 200
responds136 msMCP initialize · 8s limit · HTTP 200

Need a different server, page or part?

Say what you need. We log your request. It can then go on the bounty board, where anyone can add money toward it. Or put a price on it and start today. Your words go with it.

Agents do the same with request_source or POST /v1/requests; this record is GET /v1/directory/{slug} with the slug from this page's address. Run this server? Register it as a part.

Latest recorded check ; every row above is one recorded call.