Node8
Contact

AI Connectors · Data & Analytics

Have I Been Pwned

Breach, paste and stealer log exposure lookups by email or domain

Listed in Claude · 17 published tools · Verified partner

Claude connector docs haveibeenpwned.com

Overview

What Have I Been Pwned does

Have I Been Pwned holds a corpus of credentials exposed in data breaches. The connector splits into a public layer that needs nothing and an authenticated layer that needs a subscription. Public calls cover the breach catalogue itself, the data classes recorded across breaches, and the Pwned Passwords range API that answers a hash prefix without revealing the password. Authenticated calls check a single email address, return breached aliases on a verified domain, look for paste appearances, and query stealer log exposure by email, by email domain or by website domain. Domain verification is handled inside the connector, through a DNS TXT token or an email to an approved alias.

Who it is for

Security teams investigating credential exposure across domains they control.

Tool surface

All seventeen listed tools answered, and the split is legible in their own descriptions: five work anonymously, the rest state they need an OAuth bearer token or a subscription carrying stealer-log or domain-verification access. Only the three domain verification tools do anything other than read.

Availability

Where Have I Been Pwned is listed

Have I Been Pwned is listed in the Claude connectors directory only. Have I Been Pwned has no app under the same domain in the ChatGPT directory; 392 of the 3,150 products here are on both marketplaces, and this is not one of them.

The MCP server behind a Claude connector is usually the same server a ChatGPT app would need, so the absence is a distribution decision rather than a technical one.

Claude listing

In the Claude connectors directory

Have I Been Pwned publishes 17 tools to Claude, deeper than 64.2% of the 1,253 Claude-listed connectors.

The median Claude-listed connector filed under Data & Analytics publishes 12, so this one runs 5 tools above its bucket's median and ranks 57th of 198 by tool count.

It falls in the 11-20 tools band, which holds 22.5% of the Claude directory.

Measured against the live endpoint

A direct call to the endpoint returned 17 tools, matching the 17 the listing publishes. Probed 2026-08-07.

Tools the server actually returns

  • hibp_list_breaches
  • hibp_get_breach
  • hibp_get_latest_breach
  • hibp_list_data_classes
  • hibp_get_pwned_passwords_range
  • hibp_get_breached_account
  • hibp_get_breached_account_range
  • hibp_get_paste_account
  • hibp_get_breached_domain
  • hibp_list_subscribed_domains
  • hibp_get_subscription_status
  • hibp_get_stealer_logs_by_email
  • hibp_get_stealer_logs_by_website_domain
  • hibp_get_stealer_logs_by_email_domain
  • hibp_generate_domain_verification_dns_token
  • hibp_verify_domain_verification_dns_token
  • hibp_send_domain_verification_email

Have I Been Pwned publishes a remote MCP endpoint. Claude connects to it over HTTP; there is nothing to install locally.

Every connector in the Claude directory is remote, all 1,253 of them, so transport is not a differentiator there.

Publisher
Have I Been Pwned
Verification
Verified partner (37.8% of the Claude directory)
Filed under
Data & Analytics
Endpoint
https://haveibeenpwned.com/mcp
Published tools
17 · 11-20 tools band
Depth rank in Data & Analytics
57 of 198
Snapshot
August 2026

Have I Been Pwned carries partner verification in the Claude directory, which 474 of 1,253 listings do (37.8%). That is a review step past self-publishing, not an Anthropic-built server.

In the publisher's words

How Have I Been Pwned describes it

Search email addresses and domains against the world's most widely used data breach corpus. Have I Been Pwned helps individuals determine whether their accounts have appeared in known breaches and enables organisations to investigate exposure across verified domains. Explore detailed breach information, identify exposed data types, review paste and stealer log exposure, and gain trusted security intelligence to better understand account compromise and cyber risk.

Quoted from the connector's own Claude directory listing as captured in August 2026. Node8 did not write it and does not vouch for it.

Nearby

Other Data & Analytics connectors

HYPD AI Ads

Read-only Google Ads and Shopping performance analysis

Claude · ChatGPT

Omnivio Lens

Indian D2C commerce metrics across marketplaces and quick commerce

Claude

PowerDMARC

Email authentication posture and DMARC report analysis

ChatGPT

Senzing

Entity resolution runbooks, SDK reference and sample data for Senzing

Claude

Landstack

UK planning, land availability and title data

ChatGPT

All 260 Data & Analytics connectors

This is an independent catalogue entry compiled by Node8 from Have I Been Pwned's public marketplace listing as it stood in August 2026. Listing facts come from the marketplaces; the comparisons against the rest of the directory and any live-endpoint measurements are Node8's. Node8 is not affiliated with Have I Been Pwned, and inclusion here is not an endorsement.

Want your company reachable inside ChatGPT and Claude?

Node8 builds MCP servers end to end: deciding which tools are worth exposing, the authentication and permission model, the review submissions, and the onboarding that gets them used. One server serves ChatGPT, Claude, and Microsoft Copilot.

See how it works