LeakData
OfficialClick on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@LeakDatacheck my verified email for breach exposure"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
LeakData for Antigravity CLI and Gemini CLI
Check your verified email for breach exposure and check password hash prefixes in Antigravity. LeakData returns a concise summary of the evidence it finds, so you can decide what to investigate next.
Create a LeakData account · View plans · Get help
What you can ask
Your question | What LeakData checks |
“Check my verified email for breach exposure.” | The primary email verified on your linked LeakData account. |
“Check the SHA-1 prefix 5BAA6.” | A five-character hash prefix. Never enter your password or full hash. |
Results reflect the evidence available to LeakData. A no-match result does not establish that an account or password is safe. A prefix check alone cannot confirm whether a specific password has appeared in a breach.
Related MCP server: mcp-bing-webmaster
Before you connect
You need an active LeakData plan with API access and a verified primary email for exposure searches. Creating an account alone does not enable this connection. Your account permissions and usage limits apply; the extension does not include a LeakData subscription. Review plans or contact us to confirm API access before you connect.
For individual Google accounts, use Antigravity CLI. Google moved individual Gemini CLI accounts to Antigravity CLI. Gemini CLI remains available through eligible enterprise or API access. Your Google account access is separate from your LeakData subscription.
Connect Antigravity CLI
git clone https://github.com/leakdatahq/leakdata-gemini-extension.git leakdata
agy plugin validate ./leakdata
agy plugin install ./leakdataOpen Antigravity, use /mcp to find LeakData, and complete authentication in your browser. Review the requested permissions before approving the connection.
If an older connection returns an authorization error, open /mcp, restart LeakData and choose Authenticate when prompted. Complete the new browser consent, then retry your check. Do not paste tokens into a prompt or edit authentication files.
Connect Gemini CLI
gemini extensions install https://github.com/leakdatahq/leakdata-gemini-extensionRestart Gemini CLI, then run:
/mcp auth leakdataSign in on leakdata.io and review the two requested permissions: exposure search and password-prefix checks. After connecting, /mcp shows the available LeakData tools.
Your account stays in control
The extension adds two read-only tools. It cannot change your accounts, send messages or remediate systems. Exposure searches are limited to the primary email verified on your linked account. Domain searches are not available through this MCP integration.
Authentication uses OAuth with PKCE. No API key, client secret or access token is bundled. Keep normal tool confirmations enabled. Never share plaintext passwords, complete hashes or raw breach records in a prompt.
To stop using the extension locally, disable or remove it from your client. This does not confirm that its OAuth tokens have been revoked. Contact LeakData Support if you need help ending account access; never include passwords or tokens in your message.
Connection details
Setting | Value |
MCP endpoint |
|
Transport | Streamable HTTP |
Authentication | OAuth authorization code with PKCE S256; Gemini CLI uses dynamic registration and Antigravity uses Google's published client metadata |
Permissions |
|
Tools |
|
Help and privacy
For setup or account questions, email support@leakdata.io. Report security issues privately to security@leakdata.io.
Documentation · Privacy policy · Terms · OAuth guide
This extension is maintained by LeakData. Gemini and Antigravity are Google products; no Google endorsement is implied.
Development and release status
Use Node.js 24.18.0 and npm 11.16.0 for package validation:
npm test
npx --yes @google/gemini-cli@0.59.0 extensions validate .
agy plugin validate .Package 1.0.0 passed real Antigravity CLI 1.2.0 verified-email, supplied-prefix and negative-case checks against live MCP 1.3.2. The pinned CI validator also checks Antigravity CLI 1.1.28 and Gemini CLI 0.59.0. Actual Gemini account validation remains pending. See RELEASE_CHECKLIST.md for dated evidence and limitations; source-package distribution does not establish Google gallery or MCP Store inclusion.
This server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Read-only breach intel, full history 2007-today: reports THAT an org was breached, never the data.
Breach intelligence API: email search, domain monitoring, passwords and stealer logs.
Read-only verifier for 25 ProofRelay MCP tools and non-confidential evidence bundles.
Read-only Search Console analytics, URL inspection, indexing diagnostics, and sitemaps.
Related MCP Servers
- FlicenseBqualityDmaintenanceEnables read-only access to FileMaker databases through the Data API, allowing users to retrieve records, analyze metadata, search across layouts, and infer relationships while maintaining data security.16-
- AlicenseBqualityCmaintenanceProvides secure, read-only access to Bing Webmaster Tools analytics and non-destructive URL submission for indexing, without destructive site management capabilities.16MIT
- FlicenseNot gradedqualityAmaintenanceEnables querying and verifying signed receipts of static inspections of public agent skills via read-only tools such as search_receipts, get_receipt, and get_verification_material.1-
- FlicenseNot gradedqualityCmaintenanceEnables read-only access to Google Analytics 4 and Google Search Console data, allowing users to run reports, query search analytics, and generate combined snapshots for reporting.-