Skip to main content
Glama
enesjakozh
Cyreslab-AI

Have I Been Pwned MCP Server

by Cyreslab-AI
OverviewSchemaRelated ServersScoreDiscussions
JavaScript
Remote

Have I Been Pwned MCP サーバー

鍛冶屋のバッジ

Have I Been Pwned API との統合を提供し、データ侵害によってアカウントまたはパスワードが侵害されたかどうかをチェックする Model Context Protocol (MCP) サーバー。

特徴

この MCP サーバーは、次の 4 つの主要なツールを提供します。

  1. check_email : データ侵害でメールアドレスが見つかったかどうかを確認する

  2. check_password : データ侵害でパスワードが漏洩していないか確認する（k-匿名性を使用）

  3. get_breach_details : 特定のデータ侵害に関する詳細情報を取得する

  4. list_all_breaches : システム内のすべての侵害を一覧表示します。オプションでドメイン別にフィルタリングできます。

Related MCP server: Shodan-MCP-Server

インストール

Smithery経由でインストール

Smithery経由で Claude Desktop 用の hibp-mcp-server を自動的にインストールするには:

npx -y @smithery/cli install @Cyreslab-AI/hibp-mcp-server --client claude

前提条件

設定

  1. このリポジトリをクローンします:

    git clone https://github.com/Cyreslab-AI/hibp-mcp-server.git
cd hibp-mcp-server

  2. 依存関係をインストールします:

    npm install

  3. サーバーを構築します。

    npm run build

  4. MCP 設定ファイルでサーバーを構成します。

    Claude VSCode 拡張機能の場合は、 ~/Library/Application Support/Code/User/globalStorage/saoudrizwan.claude-dev/settings/cline_mcp_settings.jsonに追加します。

    {
  "mcpServers": {
    "hibp": {
      "command": "node",
      "args": ["/path/to/hibp-mcp-server/build/index.js"],
      "env": {
        "HIBP_API_KEY": "YOUR_API_KEY_HERE"
      },
      "disabled": false,
      "autoApprove": []
    }
  }
}

    Claude デスクトップ アプリの場合は、 ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) または他のプラットフォームの同様のパスに追加します。

使用例

サーバーが設定されると、Claude を使用してデータ侵害をチェックできるようになります。

メールを確認する

User: Has my email address example@gmail.com been pwned?

Claude: Good news! This email address has not been found in any known data breaches.

または、電子メールが侵害で発見された場合:

User: Has my email address breached@example.com been pwned?

Claude: ⚠️ This email address was found in 3 data breaches.

Breach details:

1. Adobe (2013-10-04)
   Domain: adobe.com
   Description: In October 2013, 153 million Adobe accounts were breached...
   Compromised data: Email addresses, Password hints, Passwords, Usernames

2. LinkedIn (2012-05-05)
   Domain: linkedin.com
   Description: In May 2016, LinkedIn had 164 million email addresses and passwords exposed...
   Compromised data: Email addresses, Passwords

3. Dropbox (2012-07-01)
   Domain: dropbox.com
   Description: In mid-2012, Dropbox suffered a data breach which exposed...
   Compromised data: Email addresses, Passwords

Recommendations:
- Change your password for these services immediately
- If you used the same password elsewhere, change those too
- Enable two-factor authentication where available
- Consider using a password manager

パスワードを確認

User: Has the password "password123" been exposed in any breaches?

Claude: ⚠️ This password has been exposed in data breaches 123,456 times!

Recommendations:
- Stop using this password immediately
- Change it on any site where you use it
- Use a unique, strong password for each account
- Consider using a password manager

侵害の詳細を取得する

User: Tell me about the LinkedIn data breach

Claude: # LinkedIn Data Breach

**Date:** 2012-05-05
**Domain:** linkedin.com
**Accounts affected:** 164,611,595
**Verified:** Yes
**Data leaked:** Email addresses, Passwords

**Description:**
In May 2016, LinkedIn had 164 million email addresses and passwords exposed. Originally hacked in 2012, the data remained out of sight until being offered for sale on a dark market site 4 years later. The passwords in the breach were stored as SHA1 hashes without salt, the vast majority of which were quickly cracked in the days following the release of the data.

**Recommendations:**
- If you had an account on this service, change your password
- If you used the same password elsewhere, change those too
- Monitor your accounts for suspicious activity
- Be cautious of phishing attempts that may use this leaked information

すべての違反をリストする

User: List all Adobe data breaches

Claude: Found 1 breaches for domain adobe.com:

1. Adobe (2013-10-04)
   Domain: adobe.com
   Accounts affected: 152,445,165
   Compromised data: Email addresses, Password hints, Passwords, Usernames

セキュリティノート

  • パスワードチェック機能は、k-匿名性を使用して、Have I Been Pwned APIに完全なパスワードを送信せずにパスワードをチェックします。

  • パスワードのSHA-1ハッシュの最初の5文字のみがAPIに送信されます。

  • APIはプレフィックスに一致するハッシュサフィックスのリストを返し、チェックはローカルで完了します。

APIキーの設定

このサーバーのほとんどの機能（パスワードチェックを除く）を利用するには、Have I Been Pwned APIキーが必要です。APIキーはhaveibeenpwned.com/API/Keyで取得できます。

API キーは、MCP 設定構成でHIBP_API_KEYという名前の環境変数として提供する必要があります。

ライセンス

マサチューセッツ工科大学

Install Server
A
license - permissive license
A
quality
D
maintenance

How are these scores calculated?

Maintenance

–Maintainers
–Response time
–Release cycle
–Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Tools

Related MCP Servers

  • cve-search_mcp

    roadwy
    A
    license
    B
    quality
    D
    maintenance
    A Model Context Protocol (MCP) server for querying the CVE-Search API. This server provides comprehensive access to CVE-Search, browse vendor and product、get CVE per CVE-ID、get the last updated CVEs.
    6
    103
    MIT

  • Shodan-MCP-Server

    X3r0K
    F
    license
    -
    quality
    D
    maintenance
    This is a Model Context Protocol (MCP) server that provides access to the Shodan API. It allows you to programmatically query Shodan for information about devices, vulnerabilities, and more.
    2

  • MCP Vulnerability Checker

    firetix
    A
    license
    A
    quality
    D
    maintenance
    A Model Context Protocol server providing security vulnerability intelligence tools including CVE lookup, EPSS scoring, CVSS calculation, exploit detection, and Python package vulnerability checking.
    8
    9
    MIT

  • Hashcat MCP Server

    MorDavid
    F
    license
    -
    quality
    D
    maintenance
    A Model Context Protocol server that provides intelligent hashcat integration for Claude Desktop, allowing users to crack hashes, analyze passwords, and perform security assessments directly from Claude conversations.
    25

View all related MCP servers

Related MCP Connectors

  • Hibp

    Have I Been Pwned MCP

  • mcp

    MCP (Model Context Protocol) server for Appwrite

  • mcp-server

    MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM.

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/Cyreslab-AI/hibp-mcp-server'

If you have feedback or need assistance with the MCP directory API, please join our Discord server