This MCP server allows users to query breach data from the Have I Been Pwned API using natural language. It supports checking email addresses and passwords for exposure in data breaches.
From the registry: Have I Been Pwned MCP
Please install the `hibp` MCP server into my current AI client (that's you).
Required prerequisites (do these first if not already done):
- **HIBP API key** — Get a key from Have I Been Pwned (https://haveibeenpwned.com/API/Key)
- **Node.js 22+** — Node.js runtime (https://nodejs.org)
Canonical MCP server config (stdio transport):
- command: `npx`
- args: ["-y","@darrenjrobinson/hibp-mcp"]
- required environment variables:
- `HIBP_API_KEY`: Have I Been Pwned API key (example: `<your-hibp-api-key>`)
- `HIBP_SUBSCRIPTION_PLAN`: HIBP API subscription plan (Pwned 1-5) (example: `Pwned 1`)
Add this MCP server to my current client's config in the correct format for you. If you need secrets or credentials I haven't provided, ASK me — do not invent values or leave raw placeholders. After adding it, tell me how to verify the server is connected.HIBP_API_KEYrequiredYour Have I Been Pwned API keyDead code, security, secrets detection and code quality for Python, TypeScript, Go.