Skip to content
ClaudeListedTier: partner

Have I Been Pwned

Check email addresses and domains for data breaches

First seen 2 Oct 2026. Evidence as of 3 Oct 2026.

17
Tools
From an anonymous probe
2
Source listings
Each with its own history
0
Recorded changes
Since first seen

Tools

ToolDescriptionBehaviour
hibp_generate_domain_verification_dns_tokenGenerate the TXT record value required to verify domain control via DNS, creating or reusing the private HIBP domain-verification records needed for the request. Requires an authenticated subscription with domain-verification access.Changes data
hibp_get_breachLook up a single public HIBP breach by its canonical breach name, such as Adobe.Read-only
hibp_get_breached_accountSearch HIBP for breaches affecting a single email address. Requires an OAuth bearer token linked to an active HIBP API subscription; use domain and verification filters to refine the result.Read-only
hibp_get_breached_account_rangeQuery the authenticated HIBP k-anonymity breached-account range endpoint with the first 6 characters of a SHA-1 email hash. Requires a subscription with k-anonymity access; compare each returned suffix with the remaining hash characters locally because a prefix alone cannot identify an account.Read-only
hibp_get_breached_domainReturn breached aliases for a verified domain. This tool requires an authorized subscription via OAuth bearer token.Read-only
hibp_get_latest_breachReturn the most recently added public breach currently loaded into HIBP.Read-only
hibp_get_paste_accountSearch for public pastes containing a single email address. Requires an OAuth bearer token linked to an active HIBP API subscription; run this separately from breached-account lookup.Read-only
hibp_get_pwned_passwords_rangeQuery the public Pwned Passwords k-anonymity API with a 5-character SHA-1 or NTLM prefix and return matching suffixes with prevalence counts.Read-only
hibp_get_stealer_logs_by_emailReturn website domains historically observed in stealer logs for an email address. Requires an OAuth-linked active subscription with the stealer-log feature; results do not establish current account access.Read-only
hibp_get_stealer_logs_by_email_domainReturn email aliases and associated website domains historically observed in stealer logs for an email domain. Requires an OAuth-linked active subscription with the stealer-log feature; results do not establish current account access.Read-only
hibp_get_stealer_logs_by_website_domainReturn email addresses historically observed in stealer logs for a website domain. Requires an OAuth-linked active subscription with the stealer-log feature; results do not establish current account access.Read-only
hibp_get_subscription_statusReturn the current plan, quotas, rate limits, expiry, and feature flags for the active HIBP API subscription linked to the authenticated OAuth connection. Use it to confirm access before feature-dependent lookups.Read-only
hibp_list_breachesList public HIBP breaches, optionally filtered by domain, spam-list flag, and verification status.Read-only
hibp_list_data_classesList the data classes used across public HIBP breach models, such as email addresses or passwords.Read-only
hibp_list_subscribed_domainsList the domains associated with the authenticated HIBP subscription.Read-only
hibp_send_domain_verification_emailSend a domain verification email to an approved alias such as admin or security. Requires an authenticated subscription with domain-verification access.Changes data
hibp_verify_domain_verification_dns_tokenComplete domain verification by checking the expected HIBP TXT record on the target domain. Requires an authenticated subscription with domain-verification access.Changes data

Change history

No changes since the first observation. The first snapshot is the baseline.

Source listings
SourceListingFirst seenLast seenVersions
claude.com listing pageda758d89-9c8b-4f6c-a5bf-65eb14b9fc212 Oct 20263 Oct 20261
MCPTop directory snapshotanthropic:da758d89-9c8b-4f6c-a5bf-65eb14b9fc212 Oct 20263 Oct 20261