AptLynxMCP server
Hibp
io.github.darrenjrobinson/hibp
Checked 26 Oct 2026, 08:31 UTC · Still published on its registry; checked against OSV.dev; never run by us
A Model Context Protocol (MCP) server for the Have I Been Pwned (HIBP) API
At a glance
- Type
- MCP server
- Publisher
- Not verified
- Status
- Runs on your computer
- Sets up in
- Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code
- Last checked
- 26 Oct 2026, 08:31 UTC
Connect it to your agent
Opens the app, which shows the server and asks you to confirm. It then runs the package on your computer with your permissions. For other apps, copy the setup below.
Claude Code
claude mcp add hibp --env HIBP_API_KEY=YOUR_VALUE --env HIBP_SUBSCRIPTION_PLAN=YOUR_VALUE -- npx -y @darrenjrobinson/hibp-mcp@1.1.0
Claude Desktop
{"mcpServers":{"hibp":{"command":"npx","args":["-y","@darrenjrobinson/hibp-mcp@1.1.0"],"env":{"HIBP_API_KEY":"YOUR_VALUE","HIBP_SUBSCRIPTION_PLAN":"YOUR_VALUE"}}}}
Codex (config.toml)
[mcp_servers.hibp]
command = "npx"
args = ["-y","@darrenjrobinson/hibp-mcp@1.1.0"]
env = { HIBP_API_KEY = "YOUR_VALUE", HIBP_SUBSCRIPTION_PLAN = "YOUR_VALUE" }
Gemini CLI
{"mcpServers":{"hibp":{"command":"npx","args":["-y","@darrenjrobinson/hibp-mcp@1.1.0"],"env":{"HIBP_API_KEY":"YOUR_VALUE","HIBP_SUBSCRIPTION_PLAN":"YOUR_VALUE"}}}}
Cursor
{"mcpServers":{"hibp":{"command":"npx","args":["-y","@darrenjrobinson/hibp-mcp@1.1.0"],"env":{"HIBP_API_KEY":"YOUR_VALUE","HIBP_SUBSCRIPTION_PLAN":"YOUR_VALUE"}}}}
VS Code
{"servers":{"hibp":{"type":"stdio","command":"npx","args":["-y","@darrenjrobinson/hibp-mcp@1.1.0"],"env":{"HIBP_API_KEY":"YOUR_VALUE","HIBP_SUBSCRIPTION_PLAN":"YOUR_VALUE"}}}}
Runs on your computer with your permissions: check the package and its source before installing. Replace YOUR_VALUE with your own HIBP_API_KEY, HIBP_SUBSCRIPTION_PLAN.
Browse
Related MCP servers
- Have I Been Pwned
Breach intelligence API: email search, domain monitoring, passwords and stealer logs. - Hibp
Have I Been Pwned MCP - Presend MCP Server
Before an AI agent installs an npm/PyPI package: typosquat, vulnerability and existence checks. - ContrastAPI
55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key. - k-anonymity 5-hex prefix, value discarded
k-anonymity 5-hex prefix, value discarded - Could Have Been Email
could-have-been-email MCP — wraps StupidAPIs (keyless — no credential needed) - HaveIBeenPwned k-prefix shape, value discarded
HaveIBeenPwned k-prefix shape, value discarded - Biorxiv
bioRxiv / medRxiv MCP
Badge for your README
[](https://aptlynx.net/servers/io.github.darrenjrobinson/hibp)
Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents