Hibp MCP Server

🚀 Have I Been Pwned MCP Server

This is an MCP (Model Context Protocol) server integrated with the Have I Been Pwned API, which can check if your account or password has been exposed in data breaches.

✨ Features

This MCP server offers four main tools:

1. check_email: Check if an email address appears in data breaches.
2. check_password: Use k-anonymity to check if a password has been exposed in data breaches.
3. get_breach_details: Get detailed information about a specific data breach.
4. list_all_breaches: List all breaches in the system, with an optional domain filter.

📦 Installation

Install via Smithery

To automatically install the hibp-mcp-server for Claude Desktop:

npx -y --install @smithery/hibp-mcp-server

Manual Installation

1. Clone this repository:

   git clone https://github.com/ClaudeAI/hibp-mcp-server.git
   cd hibp-mcp-server
   

2. Install dependencies:

   npm install
   

💻 Usage Examples

Basic Usage

After installation, you can run the server as follows:

node index.js

By default, the server will run at http://localhost:3000.

📚 Documentation

Configuration

Provide the API key as an environment variable:

HIBP_API_KEY=your_api_key_here

Get the API key: haveibeenpwned.com/API/Key

Example Responses

Check Email

Request:

http://localhost:3000/api/check-email?email=user@example.com

Response:

{
  "result": {
    "passwordLeaks": false,
    "breaches": []
  }
}

Check Password

Request:

http://localhost:3000/api/check-password?password=your_password_here

Response:

{
  "result": {
    "passwordLeaks": false
  }
}

🔧 Technical Details

• The password check function uses k-anonymity and is completed locally. Only the first 5 characters of the SHA-1 hash are sent to the Have I Been Pwned API.
• The API key is only required when configuring on the server side.

📄 License

MIT