Launching on Product Hunt today
MCP1
Start with MCP1

Have I Been Pwned MCP server

by Have I Been Pwned

Breaches, exposed email addresses and domains, stealer logs and Pwned Passwords.

One-click authSecurity & IT
Add Have I Been Pwned to MCP1Have I Been Pwned docs

What it can do

  • Look up breaches
  • Check email exposure
  • Search stealer logs
  • Check Pwned Passwords

Through MCP1, every tool call is checked against your groups and rules, and recorded in the audit log.

How it connects

Authenticate with Have I Been Pwned and approve MCP1. No token to copy; MCP1 keeps the connection sealed and refreshes it.

Email, domain and stealer log searches need an HIBP subscription. Breach lookups work without one.

Endpoint
https://haveibeenpwned.com/mcp
Transport
Streamable HTTP
Docs
haveibeenpwned.com

With MCP1

Have I Been Pwned for the whole team, behind one URL

  1. 01

    Install it once

    An admin adds Have I Been Pwned from the MCP1 catalog. Its authentication or token stays sealed in MCP1, never on a laptop.

  2. 02

    Decide who gets what

    Open it to groups, fully or read-only, and set rules per tool. Destructive tools can need an admin.

  3. 03

    Connect any client

    Claude, Cursor, ChatGPT, Codex and the rest connect one gateway URL and sign in with their own account.

More for security & it

See all security & it servers
  • GitHubEngineering

    Repositories, issues, pull requests, code search and Actions.

    Token
  • CloudflareEngineering

    The whole Cloudflare API: Workers, DNS, R2, zones and more.

    One-click auth
  • DatadogEngineering

    Logs, metrics, traces, monitors and incidents in Datadog.

    One-click auth
  • ClerkEngineering

    Clerk SDK snippets plus your apps, users and organizations.

    One-click authBeta
  • WorkOSEngineering

    Manage your WorkOS workspace: users, orgs, SSO and directories.

    One-click auth
  • ngrokEngineering

    Manage ngrok endpoints, domains, traffic policies and credentials.

    TokenPreview