Have I Been Pwned
REMOTE · HAVEIBEENPWNED.COM · SCANNED AUG 3
Breach intelligence API: email search, domain monitoring, passwords and stealer logs.
Available components
+6 this week
79 79 Trust /100
Trust breakdown (6 categories)
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score →
Endpoint Security83
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC is configured correctly; the domain's records validate against the full chain to the root. View diagnostics → Pass
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability85
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (excellent).Pass
- Tool/resource definitions use about 21697 tokens (~20/item across 1045 items; 17 tools + 1028 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management27
- Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Install
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
remote · haveibeenpwned.com
# add to Claude Code
claude mcp add --transport http troyhunt-hibp https://haveibeenpwned.com/mcp
# ~/.codex/config.toml
[mcp_servers.troyhunt-hibp] url = "https://haveibeenpwned.com/mcp"
// opencode.json
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"troyhunt-hibp": {
"type": "remote",
"url": "https://haveibeenpwned.com/mcp",
"enabled": true
}
}
} # add to OpenClaw
openclaw mcp add troyhunt-hibp --url https://haveibeenpwned.com/mcp --transport streamable-http
# ~/.hermes/config.yaml
mcp_servers:
troyhunt-hibp:
url: "https://haveibeenpwned.com/mcp" // mcp.json
{
"mcpServers": {
"troyhunt-hibp": {
"type": "http",
"url": "https://haveibeenpwned.com/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Changelog
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 2 Aug 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 20 to 23. That category is still filling its 30-day observation window: 6 days of observed history at the previous scan, 7 at this one. The score rises as the window fills, whether or not the server changes.
- 1 Aug 26 +1
- Schema quality: good → excellent functional
- New resource “SplitVPN” functional
- 31 Jul 26 +3
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 30 Jul 26 +1
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 28 Jul 26 0
- Schema quality: excellent → good functional
- 27 Jul 26 +1
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 26 Jul 26 72
First indexed and scored.
Diagnostics
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 3 Aug 2026 · Probed https://haveibeenpwned.com/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=haveibeenpwned.com | CN=WE1,O=Google Trust Services,C=US | 6 Jul 2026 | 4 Oct 2026 | ECDSA 256 | ECDSA-SHA256 | fedc68972ec454080ead53894b438e85 |
| SANs: haveibeenpwned.com, cache.haveibeenpwned.com | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
DNSSEC secure
Validation of haveibeenpwned.com. — Secure
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| haveibeenpwned.com. | present | 2371 | 13 | Verified |
| haveibeenpwned.com. | Verified address RRset verified with the apex keys |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=31536000; includeSubDomains; preload |
| x-content-type-options | nosniff |
| permissions-policy | accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=() |
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://haveibeenpwned.com/mcp | Verified | 200 | |
| http (plaintext) | http://haveibeenpwned.com/mcp | HTTPS enforced | 301 | https://haveibeenpwned.com/mcp |
MCP tools
— 17 exposed
· ~1,789 tokens
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.
Tool
Tokens
hibp_generate_domain_verification_dns_token Have I Been Pwned - Generate Domain Verification DNS Token ~77
Generate the TXT record value required to verify domain control via DNS. Requires an authenticated subscription with domain-verification access.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | The domain to generate a verification token for. |
| response_format | string | — | Format the text response as markdown (default) or JSON. structuredContent is always returned. |
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | — | — |
| guidance | string | — | Additional guidance for resolving the tool error. |
| message | string | — | Present when the tool returns an error. |
| rateLimitResetAt | string | — | UTC timestamp indicating when the current rate limit window should have reset. |
| retryAfterHeaders | object | — | Retry headers that mirror the standard HTTP rate-limit response when applicable. |
| retryAfterSeconds | integer | — | How long to wait before retrying, when the tool is rate limited. |
| statusCode | integer | — | Present when the tool returns an error. |
| txtRecordValue | string | — | — |
No examples provided.
hibp_get_breach Have I Been Pwned - Breach ~71
Look up a single public HIBP breach by its canonical breach name, such as Adobe.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | The breach name to retrieve, for example Adobe. |
| response_format | string | — | Format the text response as markdown (default) or JSON. structuredContent is always returned. |
| Name | Type | Req | Description |
|---|---|---|---|
| breach | object | — | — |
| guidance | string | — | Additional guidance for resolving the tool error. |
| message | string | — | Present when the tool returns an error. |
| rateLimitResetAt | string | — | UTC timestamp indicating when the current rate limit window should have reset. |
| retryAfterHeaders | object | — | Retry headers that mirror the standard HTTP rate-limit response when applicable. |
| retryAfterSeconds | integer | — | How long to wait before retrying, when the tool is rate limited. |
| statusCode | integer | — | Present when the tool returns an error. |
No examples provided.
hibp_get_breached_account Have I Been Pwned - Breached Account ~162
Search HIBP for breaches affecting a single email address. This tool requires an OAuth bearer token.
| Name | Type | Req | Description |
|---|---|---|---|
| account | string | yes | The email address to search for. |
| domain | string | — | Filter results to a specific breach domain. |
| includeUnverified | boolean | — | Include unverified breaches. Defaults to true. |
| limit | integer | — | Maximum number of items to include in the response. Defaults to 25. |
| offset | integer | — | Number of items to skip before returning results. Defaults to 0. |
| responseMode | string | — | Choose full breach objects, truncated objects, or breach names. |
| response_format | string | — | Format the text response as markdown (default) or JSON. structuredContent is always returned. |
| Name | Type | Req | Description |
|---|---|---|---|
| account | string | — | — |
| breaches | array | — | — |
| guidance | string | — | Additional guidance for resolving the tool error. |
| hasMore | boolean | — | — |
| limit | integer | — | — |
| message | string | — | Present when the tool returns an error. |
| nextOffset | integer | — | — |
| offset | integer | — | — |
| rateLimitResetAt | string | — | UTC timestamp indicating when the current rate limit window should have reset. |
| responseMode | string | — | — |
| retryAfterHeaders | object | — | Retry headers that mirror the standard HTTP rate-limit response when applicable. |
| retryAfterSeconds | integer | — | How long to wait before retrying, when the tool is rate limited. |
| returnedCount | integer | — | — |
| statusCode | integer | — | Present when the tool returns an error. |
| totalCount | integer | — | — |
No examples provided.
hibp_get_breached_account_range Have I Been Pwned - Breached Account Range ~131
Query the authenticated HIBP k-anonymity breached-account range endpoint with the first 6 characters of a SHA-1 email hash.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | — | Maximum number of items to include in the response. Defaults to 25. |
| offset | integer | — | Number of items to skip before returning results. Defaults to 0. |
| prefix | string | yes | The first 6 hexadecimal characters of a SHA-1 hash of an email address. |
| response_format | string | — | Format the text response as markdown (default) or JSON. structuredContent is always returned. |
| Name | Type | Req | Description |
|---|---|---|---|
| guidance | string | — | Additional guidance for resolving the tool error. |
| hasMore | boolean | — | — |
| limit | integer | — | — |
| matchCount | integer | — | — |
| matches | array | — | — |
| message | string | — | Present when the tool returns an error. |
| nextOffset | integer | — | — |
| offset | integer | — | — |
| prefix | string | — | — |
| rateLimitResetAt | string | — | UTC timestamp indicating when the current rate limit window should have reset. |
| retryAfterHeaders | object | — | Retry headers that mirror the standard HTTP rate-limit response when applicable. |
| retryAfterSeconds | integer | — | How long to wait before retrying, when the tool is rate limited. |
| returnedCount | integer | — | — |
| statusCode | integer | — | Present when the tool returns an error. |
| totalCount | integer | — | — |
No examples provided.
hibp_get_breached_domain Have I Been Pwned - Breached Domain ~110
Return breached aliases for a verified domain. This tool requires an authorized subscription via OAuth bearer token.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | The verified domain to search. |
| limit | integer | — | Maximum number of items to include in the response. Defaults to 25. |
| offset | integer | — | Number of items to skip before returning results. Defaults to 0. |
| response_format | string | — | Format the text response as markdown (default) or JSON. structuredContent is always returned. |
| Name | Type | Req | Description |
|---|---|---|---|
| aliasCount | integer | — | — |
| breachesByAlias | object | — | — |
| domain | string | — | — |
| guidance | string | — | Additional guidance for resolving the tool error. |
| hasMore | boolean | — | — |
| limit | integer | — | — |
| message | string | — | Present when the tool returns an error. |
| nextOffset | integer | — | — |
| offset | integer | — | — |
| rateLimitResetAt | string | — | UTC timestamp indicating when the current rate limit window should have reset. |
| retryAfterHeaders | object | — | Retry headers that mirror the standard HTTP rate-limit response when applicable. |
| retryAfterSeconds | integer | — | How long to wait before retrying, when the tool is rate limited. |
| returnedCount | integer | — | — |
| statusCode | integer | — | Present when the tool returns an error. |
| totalCount | integer | — | — |
No examples provided.
hibp_get_latest_breach Have I Been Pwned - Latest Breach ~51
Return the most recently added public breach currently loaded into HIBP.
| Name | Type | Req | Description |
|---|---|---|---|
| response_format | string | — | Format the text response as markdown (default) or JSON. structuredContent is always returned. |
| Name | Type | Req | Description |
|---|---|---|---|
| breach | object | — | — |
| guidance | string | — | Additional guidance for resolving the tool error. |
| message | string | — | Present when the tool returns an error. |
| rateLimitResetAt | string | — | UTC timestamp indicating when the current rate limit window should have reset. |
| retryAfterHeaders | object | — | Retry headers that mirror the standard HTTP rate-limit response when applicable. |
| retryAfterSeconds | integer | — | How long to wait before retrying, when the tool is rate limited. |
| statusCode | integer | — | Present when the tool returns an error. |
No examples provided.
hibp_get_paste_account Have I Been Pwned - Paste Account ~111
Search for public pastes containing an email address. This tool requires an OAuth bearer token.
| Name | Type | Req | Description |
|---|---|---|---|
| account | string | yes | The email address to search for pastes. |
| limit | integer | — | Maximum number of items to include in the response. Defaults to 25. |
| offset | integer | — | Number of items to skip before returning results. Defaults to 0. |
| response_format | string | — | Format the text response as markdown (default) or JSON. structuredContent is always returned. |
| Name | Type | Req | Description |
|---|---|---|---|
| account | string | — | — |
| guidance | string | — | Additional guidance for resolving the tool error. |
| hasMore | boolean | — | — |
| limit | integer | — | — |
| message | string | — | Present when the tool returns an error. |
| nextOffset | integer | — | — |
| offset | integer | — | — |
| pastes | array | — | — |
| rateLimitResetAt | string | — | UTC timestamp indicating when the current rate limit window should have reset. |
| retryAfterHeaders | object | — | Retry headers that mirror the standard HTTP rate-limit response when applicable. |
| retryAfterSeconds | integer | — | How long to wait before retrying, when the tool is rate limited. |
| returnedCount | integer | — | — |
| statusCode | integer | — | Present when the tool returns an error. |
| totalCount | integer | — | — |
No examples provided.
hibp_get_pwned_passwords_range Pwned Passwords Range Search ~180
Query the public Pwned Passwords k-anonymity API with a 5-character SHA-1 or NTLM prefix and return matching suffixes with prevalence counts.
| Name | Type | Req | Description |
|---|---|---|---|
| addPadding | boolean | — | Send the Add-Padding header and discard padded zero-count entries. |
| limit | integer | — | Maximum number of items to include in the response. Defaults to 25. |
| mode | string | — | Use SHA-1 by default or NTLM when mode is set to ntlm. |
| offset | integer | — | Number of items to skip before returning results. Defaults to 0. |
| prefix | string | yes | The first 5 hexadecimal characters of a SHA-1 or NTLM hash. |
| response_format | string | — | Format the text response as markdown (default) or JSON. structuredContent is always returned. |
| Name | Type | Req | Description |
|---|---|---|---|
| addPadding | boolean | — | — |
| guidance | string | — | Additional guidance for resolving the tool error. |
| hasMore | boolean | — | — |
| limit | integer | — | — |
| matchCount | integer | — | — |
| matches | array | — | — |
| message | string | — | Present when the tool returns an error. |
| mode | string | — | — |
| nextOffset | integer | — | — |
| offset | integer | — | — |
| prefix | string | — | — |
| rateLimitResetAt | string | — | UTC timestamp indicating when the current rate limit window should have reset. |
| retryAfterHeaders | object | — | Retry headers that mirror the standard HTTP rate-limit response when applicable. |
| retryAfterSeconds | integer | — | How long to wait before retrying, when the tool is rate limited. |
| returnedCount | integer | — | — |
| statusCode | integer | — | Present when the tool returns an error. |
| totalCount | integer | — | — |
No examples provided.
hibp_get_stealer_logs_by_email Have I Been Pwned - Stealer Logs by Email ~121
Return website domains observed in stealer logs for an email address. Requires an authenticated subscription with stealer-log access.
| Name | Type | Req | Description |
|---|---|---|---|
| string | yes | The email address to search for in stealer logs. | |
| limit | integer | — | Maximum number of items to include in the response. Defaults to 25. |
| offset | integer | — | Number of items to skip before returning results. Defaults to 0. |
| response_format | string | — | Format the text response as markdown (default) or JSON. structuredContent is always returned. |
| Name | Type | Req | Description |
|---|---|---|---|
| domains | array | — | — |
| string | — | — | |
| guidance | string | — | Additional guidance for resolving the tool error. |
| hasMore | boolean | — | — |
| limit | integer | — | — |
| message | string | — | Present when the tool returns an error. |
| nextOffset | integer | — | — |
| offset | integer | — | — |
| rateLimitResetAt | string | — | UTC timestamp indicating when the current rate limit window should have reset. |
| retryAfterHeaders | object | — | Retry headers that mirror the standard HTTP rate-limit response when applicable. |
| retryAfterSeconds | integer | — | How long to wait before retrying, when the tool is rate limited. |
| returnedCount | integer | — | — |
| statusCode | integer | — | Present when the tool returns an error. |
| totalCount | integer | — | — |
No examples provided.
hibp_get_stealer_logs_by_email_domain Have I Been Pwned - Stealer Logs by Email Domain ~126
Return email aliases and associated website domains observed in stealer logs for an email domain. Requires an authenticated subscription with stealer-log access.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | The email domain to search for in stealer logs. |
| limit | integer | — | Maximum number of items to include in the response. Defaults to 25. |
| offset | integer | — | Number of items to skip before returning results. Defaults to 0. |
| response_format | string | — | Format the text response as markdown (default) or JSON. structuredContent is always returned. |
| Name | Type | Req | Description |
|---|---|---|---|
| aliasCount | integer | — | — |
| aliases | object | — | — |
| domain | string | — | — |
| guidance | string | — | Additional guidance for resolving the tool error. |
| hasMore | boolean | — | — |
| limit | integer | — | — |
| message | string | — | Present when the tool returns an error. |
| nextOffset | integer | — | — |
| offset | integer | — | — |
| rateLimitResetAt | string | — | UTC timestamp indicating when the current rate limit window should have reset. |
| retryAfterHeaders | object | — | Retry headers that mirror the standard HTTP rate-limit response when applicable. |
| retryAfterSeconds | integer | — | How long to wait before retrying, when the tool is rate limited. |
| returnedCount | integer | — | — |
| statusCode | integer | — | Present when the tool returns an error. |
| totalCount | integer | — | — |
No examples provided.
hibp_get_stealer_logs_by_website_domain Have I Been Pwned - Stealer Logs by Website Domain ~123
Return email addresses observed in stealer logs for a website domain. Requires an authenticated subscription with stealer-log access.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | The website domain to search for in stealer logs. |
| limit | integer | — | Maximum number of items to include in the response. Defaults to 25. |
| offset | integer | — | Number of items to skip before returning results. Defaults to 0. |
| response_format | string | — | Format the text response as markdown (default) or JSON. structuredContent is always returned. |
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | — | — |
| emails | array | — | — |
| guidance | string | — | Additional guidance for resolving the tool error. |
| hasMore | boolean | — | — |
| limit | integer | — | — |
| message | string | — | Present when the tool returns an error. |
| nextOffset | integer | — | — |
| offset | integer | — | — |
| rateLimitResetAt | string | — | UTC timestamp indicating when the current rate limit window should have reset. |
| retryAfterHeaders | object | — | Retry headers that mirror the standard HTTP rate-limit response when applicable. |
| retryAfterSeconds | integer | — | How long to wait before retrying, when the tool is rate limited. |
| returnedCount | integer | — | — |
| statusCode | integer | — | Present when the tool returns an error. |
| totalCount | integer | — | — |
No examples provided.
hibp_get_subscription_status Have I Been Pwned - Subscription Status ~54
Return the current subscription details and feature flags for the authenticated OAuth-linked HIBP subscription.
| Name | Type | Req | Description |
|---|---|---|---|
| response_format | string | — | Format the text response as markdown (default) or JSON. structuredContent is always returned. |
| Name | Type | Req | Description |
|---|---|---|---|
| guidance | string | — | Additional guidance for resolving the tool error. |
| message | string | — | Present when the tool returns an error. |
| rateLimitResetAt | string | — | UTC timestamp indicating when the current rate limit window should have reset. |
| retryAfterHeaders | object | — | Retry headers that mirror the standard HTTP rate-limit response when applicable. |
| retryAfterSeconds | integer | — | How long to wait before retrying, when the tool is rate limited. |
| statusCode | integer | — | Present when the tool returns an error. |
| subscription | object | — | — |
No examples provided.
hibp_list_breaches Have I Been Pwned - Breaches ~150
List public HIBP breaches, optionally filtered by domain, spam-list flag, and verification status.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | — | Filter to breaches for a specific domain. |
| includeUnverified | boolean | — | Include unverified breaches. Defaults to true. |
| isSpamList | boolean | — | Filter to breaches that are or are not flagged as spam lists. |
| limit | integer | — | Maximum number of items to include in the response. Defaults to 25. |
| offset | integer | — | Number of items to skip before returning results. Defaults to 0. |
| response_format | string | — | Format the text response as markdown (default) or JSON. structuredContent is always returned. |
| Name | Type | Req | Description |
|---|---|---|---|
| breaches | array | — | — |
| guidance | string | — | Additional guidance for resolving the tool error. |
| hasMore | boolean | — | — |
| limit | integer | — | — |
| message | string | — | Present when the tool returns an error. |
| nextOffset | integer | — | — |
| offset | integer | — | — |
| rateLimitResetAt | string | — | UTC timestamp indicating when the current rate limit window should have reset. |
| retryAfterHeaders | object | — | Retry headers that mirror the standard HTTP rate-limit response when applicable. |
| retryAfterSeconds | integer | — | How long to wait before retrying, when the tool is rate limited. |
| returnedCount | integer | — | — |
| statusCode | integer | — | Present when the tool returns an error. |
| totalCount | integer | — | — |
No examples provided.
hibp_list_data_classes Have I Been Pwned - Data Classes ~56
List the data classes used across public HIBP breach models, such as email addresses or passwords.
| Name | Type | Req | Description |
|---|---|---|---|
| response_format | string | — | Format the text response as markdown (default) or JSON. structuredContent is always returned. |
| Name | Type | Req | Description |
|---|---|---|---|
| dataClasses | array | — | — |
| guidance | string | — | Additional guidance for resolving the tool error. |
| message | string | — | Present when the tool returns an error. |
| rateLimitResetAt | string | — | UTC timestamp indicating when the current rate limit window should have reset. |
| retryAfterHeaders | object | — | Retry headers that mirror the standard HTTP rate-limit response when applicable. |
| retryAfterSeconds | integer | — | How long to wait before retrying, when the tool is rate limited. |
| statusCode | integer | — | Present when the tool returns an error. |
No examples provided.
hibp_list_subscribed_domains Have I Been Pwned - Subscribed Domains ~90
List the domains associated with the authenticated HIBP subscription.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | — | Maximum number of items to include in the response. Defaults to 25. |
| offset | integer | — | Number of items to skip before returning results. Defaults to 0. |
| response_format | string | — | Format the text response as markdown (default) or JSON. structuredContent is always returned. |
| Name | Type | Req | Description |
|---|---|---|---|
| guidance | string | — | Additional guidance for resolving the tool error. |
| hasMore | boolean | — | — |
| limit | integer | — | — |
| message | string | — | Present when the tool returns an error. |
| nextOffset | integer | — | — |
| offset | integer | — | — |
| rateLimitResetAt | string | — | UTC timestamp indicating when the current rate limit window should have reset. |
| retryAfterHeaders | object | — | Retry headers that mirror the standard HTTP rate-limit response when applicable. |
| retryAfterSeconds | integer | — | How long to wait before retrying, when the tool is rate limited. |
| returnedCount | integer | — | — |
| statusCode | integer | — | Present when the tool returns an error. |
| subscribedDomains | array | — | — |
| totalCount | integer | — | — |
No examples provided.
hibp_send_domain_verification_email Have I Been Pwned - Send Domain Verification Email ~97
Send a domain verification email to an approved alias such as admin or security. Requires an authenticated subscription with domain-verification access.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | The domain to verify by email. |
| emailAlias | string | yes | The approval alias to send the verification email to, for example admin. |
| response_format | string | — | Format the text response as markdown (default) or JSON. structuredContent is always returned. |
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | — | — |
| emailAlias | string | — | — |
| emailSent | boolean | — | — |
| guidance | string | — | Additional guidance for resolving the tool error. |
| message | string | — | Present when the tool returns an error. |
| rateLimitResetAt | string | — | UTC timestamp indicating when the current rate limit window should have reset. |
| retryAfterHeaders | object | — | Retry headers that mirror the standard HTTP rate-limit response when applicable. |
| retryAfterSeconds | integer | — | How long to wait before retrying, when the tool is rate limited. |
| statusCode | integer | — | Present when the tool returns an error. |
No examples provided.
hibp_verify_domain_verification_dns_token Have I Been Pwned - Verify Domain Verification DNS Token ~79
Complete domain verification by checking the expected HIBP TXT record on the target domain. Requires an authenticated subscription with domain-verification access.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | The domain to verify by DNS. |
| response_format | string | — | Format the text response as markdown (default) or JSON. structuredContent is always returned. |
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | — | — |
| guidance | string | — | Additional guidance for resolving the tool error. |
| message | string | — | Present when the tool returns an error. |
| rateLimitResetAt | string | — | UTC timestamp indicating when the current rate limit window should have reset. |
| retryAfterHeaders | object | — | Retry headers that mirror the standard HTTP rate-limit response when applicable. |
| retryAfterSeconds | integer | — | How long to wait before retrying, when the tool is rate limited. |
| statusCode | integer | — | Present when the tool returns an error. |
| verified | boolean | — | — |
No examples provided.