{"_id":"@darrenjrobinson/hibp-mcp","_rev":"5-4de5d5e3a677967e60cbd352a630373c","name":"@darrenjrobinson/hibp-mcp","dist-tags":{"latest":"1.0.4"},"versions":{"1.0.0":{"name":"@darrenjrobinson/hibp-mcp","version":"1.0.0","keywords":["mcp","hibp","haveibeenpwned","claude","ai"],"author":{"name":"Darren J Robinson"},"license":"MIT","_id":"@darrenjrobinson/hibp-mcp@1.0.0","maintainers":[{"name":"darrenjrobinson","email":"darren@darrenjrobinson.com"}],"homepage":"https://github.com/darrenjrobinson/HIBP-MCP-Server#readme","bugs":{"url":"https://github.com/darrenjrobinson/HIBP-MCP-Server/issues"},"bin":{"hibp-mcp":"build/main.js"},"dist":{"shasum":"93c72122529d1a89e4087e876f7fad1ba427bf6e","tarball":"https://registry.npmjs.org/@darrenjrobinson/hibp-mcp/-/hibp-mcp-1.0.0.tgz","fileCount":6,"integrity":"sha512-Q36h4+b28ZBtOJr2dimLkTFS0MVn0Btcc8dOAeEeagkl097slljNDLhzrlamBM+xazYbIF1dwRhTxsXY9u2CwQ==","signatures":[{"sig":"MEUCIECk4Uen6N0ka6Oeo07Ztw1PFg4oSxMghS5griw7ib/IAiEAgNYs+fZj3F+GVNGeVukwuz5TZ29KMjYGAoZDjmQdXzI=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":19857},"main":"build/main.js","type":"module","scripts":{"test":"jest","build":"tsc","prepublishOnly":"npm run build"},"_npmUser":{"name":"darrenjrobinson","email":"darren@darrenjrobinson.com"},"repository":{"url":"git+https://github.com/darrenjrobinson/HIBP-MCP-Server.git","type":"git"},"_npmVersion":"10.9.2","description":"A Model Context Protocol (MCP) server for the Have I Been Pwned (HIBP) API","directories":{},"_nodeVersion":"22.14.0","dependencies":{"zod":"^3.22.4","@modelcontextprotocol/sdk":"^0.1.0"},"_hasShrinkwrap":false,"devDependencies":{"jest":"^29.7.0","ts-jest":"^29.1.2","typescript":"^5.3.3","@types/jest":"^29.5.12","@types/node":"^20.11.24"},"_npmOperationalInternal":{"tmp":"tmp/hibp-mcp_1.0.0_1743553267882_0.1668021560083801","host":"s3://npm-registry-packages-npm-production"}},"1.0.1":{"name":"@darrenjrobinson/hibp-mcp","version":"1.0.1","keywords":["mcp","hibp","haveibeenpwned","claude","ai"],"author":{"name":"Darren J Robinson"},"license":"MIT","_id":"@darrenjrobinson/hibp-mcp@1.0.1","maintainers":[{"name":"darrenjrobinson","email":"darren@darrenjrobinson.com"}],"homepage":"https://github.com/darrenjrobinson/HIBP-MCP-Server#readme","bugs":{"url":"https://github.com/darrenjrobinson/HIBP-MCP-Server/issues"},"bin":{"hibp-mcp":"build/main.js"},"dist":{"shasum":"014727217ec6a6927f3862ab3595d013779f59c3","tarball":"https://registry.npmjs.org/@darrenjrobinson/hibp-mcp/-/hibp-mcp-1.0.1.tgz","fileCount":6,"integrity":"sha512-Otstyh7caNmA271BAgBK2gG0dQACAk70gr4VfpwDR/n6qrxPREGh3jEnWSClq+hCDKkSsZI9qE+rmDw7nIrGxg==","signatures":[{"sig":"MEYCIQDrWAARADWTTkl5UV7LphcUOC1K7T+Z/fr7riLH0nHprwIhAIGpcjDNweRPBA0wKD4uxXJFw73fM7djEG/EcJoWSV9U","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":19857},"main":"build/main.js","type":"module","scripts":{"test":"jest","build":"tsc","prepublishOnly":"npm run build"},"_npmUser":{"name":"darrenjrobinson","email":"darren@darrenjrobinson.com"},"repository":{"url":"git+https://github.com/darrenjrobinson/HIBP-MCP-Server.git","type":"git"},"_npmVersion":"10.9.2","description":"A Model Context Protocol (MCP) server for the Have I Been Pwned (HIBP) API","directories":{},"_nodeVersion":"22.14.0","dependencies":{"zod":"^3.24.2","@modelcontextprotocol/sdk":"^1.7.0"},"_hasShrinkwrap":false,"devDependencies":{"jest":"^29.7.0","ts-jest":"^29.3.1","typescript":"^5.8.2","@types/jest":"^29.5.12","@types/node":"^22.13.10"},"_npmOperationalInternal":{"tmp":"tmp/hibp-mcp_1.0.1_1743554084870_0.6682847348169438","host":"s3://npm-registry-packages-npm-production"}},"1.0.2":{"name":"@darrenjrobinson/hibp-mcp","version":"1.0.2","keywords":["mcp","hibp","haveibeenpwned","claude","ai"],"author":{"name":"Darren J Robinson"},"license":"MIT","_id":"@darrenjrobinson/hibp-mcp@1.0.2","maintainers":[{"name":"darrenjrobinson","email":"darren@darrenjrobinson.com"}],"homepage":"https://github.com/darrenjrobinson/HIBP-MCP-Server#readme","bugs":{"url":"https://github.com/darrenjrobinson/HIBP-MCP-Server/issues"},"bin":{"hibp-mcp":"build/main.js"},"dist":{"shasum":"7ea3246f128bfdd53047ea3e571e4b4e659a21e7","tarball":"https://registry.npmjs.org/@darrenjrobinson/hibp-mcp/-/hibp-mcp-1.0.2.tgz","fileCount":6,"integrity":"sha512-2me7Xp+oZnWd75KWYRR4F7ciwfONvGdNqBNRJyY42jy1pUy0igFaULvnZ3GQU5P80N7QA3N+RgJkE728cPHxPA==","signatures":[{"sig":"MEYCIQCRFJrnyyaAK5V9g8pfNO5/96SYM65g3NDE3umkf4E9ZAIhAPpu2nbpo/kAJtkaLjTMvbqBlh+/bTXzWn5ooFqU7ECF","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":20242},"main":"build/main.js","type":"module","scripts":{"test":"jest","build":"tsc","prepublishOnly":"npm run build"},"_npmUser":{"name":"darrenjrobinson","email":"darren@darrenjrobinson.com"},"repository":{"url":"git+https://github.com/darrenjrobinson/HIBP-MCP-Server.git","type":"git"},"_npmVersion":"10.9.2","description":"A Model Context Protocol (MCP) server for the Have I Been Pwned (HIBP) API","directories":{},"_nodeVersion":"22.14.0","dependencies":{"zod":"^3.24.2","@modelcontextprotocol/sdk":"^1.7.0"},"_hasShrinkwrap":false,"devDependencies":{"jest":"^29.7.0","ts-jest":"^29.3.1","typescript":"^5.8.2","@types/jest":"^29.5.12","@types/node":"^22.13.10"},"_npmOperationalInternal":{"tmp":"tmp/hibp-mcp_1.0.2_1743555187332_0.6262589673393977","host":"s3://npm-registry-packages-npm-production"}},"1.0.3":{"name":"@darrenjrobinson/hibp-mcp","version":"1.0.3","keywords":["mcp","hibp","haveibeenpwned","claude","ai"],"author":{"name":"Darren J Robinson"},"license":"MIT","_id":"@darrenjrobinson/hibp-mcp@1.0.3","maintainers":[{"name":"darrenjrobinson","email":"darren@darrenjrobinson.com"}],"homepage":"https://github.com/darrenjrobinson/HIBP-MCP-Server#readme","bugs":{"url":"https://github.com/darrenjrobinson/HIBP-MCP-Server/issues"},"bin":{"hibp-mcp":"build/main.js"},"dist":{"shasum":"b620bc15b36b42db1ba91ac9014b5c77f2725afc","tarball":"https://registry.npmjs.org/@darrenjrobinson/hibp-mcp/-/hibp-mcp-1.0.3.tgz","fileCount":7,"integrity":"sha512-A5HxJq3gjlRKYbF6kE2e04LMpygZ/8SBLhqb/rVPzWsXUkBbMMmDVnd50c3txbIQ6RKGP138L1AZd9UUX2suHQ==","signatures":[{"sig":"MEQCIGEMCvZQFvr/4B15vpBa05Om5wvMS36ylTsApqi9bKd6AiBjWOXfQ+qleFsT2V/pAHexodkCLPEH5nv2HP9zINXTtg==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":21427},"main":"build/main.js","type":"module","gitHead":"cb17cbbbb3c97979bf52bc43c2f73f6d90ca3808","mcpName":"io.github.darrenjrobinson/hibp","scripts":{"test":"jest","build":"tsc","prepublishOnly":"npm run build"},"_npmUser":{"name":"darrenjrobinson","email":"darren@darrenjrobinson.com"},"repository":{"url":"git+https://github.com/darrenjrobinson/HIBP-MCP-Server.git","type":"git"},"_npmVersion":"10.9.2","description":"A Model Context Protocol (MCP) server for the Have I Been Pwned (HIBP) API","directories":{},"_nodeVersion":"23.11.0","dependencies":{"zod":"^3.24.2","@modelcontextprotocol/sdk":"^1.7.0"},"_hasShrinkwrap":false,"devDependencies":{"jest":"^29.7.0","ts-jest":"^29.3.1","typescript":"^5.8.2","@types/jest":"^29.5.12","@types/node":"^22.13.10"},"_npmOperationalInternal":{"tmp":"tmp/hibp-mcp_1.0.3_1773174895880_0.5616467068213784","host":"s3://npm-registry-packages-npm-production"}},"1.0.4":{"name":"@darrenjrobinson/hibp-mcp","version":"1.0.4","mcpName":"io.github.darrenjrobinson/hibp","description":"A Model Context Protocol (MCP) server for the Have I Been Pwned (HIBP) API","main":"build/main.js","type":"module","bin":{"hibp-mcp":"build/main.js"},"scripts":{"build":"tsc","prepublishOnly":"npm run build","test":"jest","check:version":"node scripts/check-version.mjs","smoke":"node scripts/smoke-test.mjs"},"dependencies":{"@modelcontextprotocol/sdk":"^1.30.0","zod":"^3.25.76"},"devDependencies":{"@types/jest":"^29.5.12","@types/node":"^22.13.10","jest":"^29.7.0","ts-jest":"^29.3.1","typescript":"^5.8.2"},"keywords":["mcp","hibp","haveibeenpwned","claude","ai"],"author":{"name":"Darren J Robinson"},"license":"MIT","repository":{"type":"git","url":"git+https://github.com/darrenjrobinson/HIBP-MCP-Server.git"},"gitHead":"ba087b6e9e0771199038b6ad2a08bfb84ca27f0e","_id":"@darrenjrobinson/hibp-mcp@1.0.4","bugs":{"url":"https://github.com/darrenjrobinson/HIBP-MCP-Server/issues"},"homepage":"https://github.com/darrenjrobinson/HIBP-MCP-Server#readme","_nodeVersion":"24.20.0","_npmVersion":"11.19.1","dist":{"integrity":"sha512-pvgo25FvqMzCavkNEjnSb+d15ofqtUsYPoujxzgg7Tnx8f6/NYE59WE+WZW8LTF7MgTz+IVWSrMEDB63T6w70w==","shasum":"4eb9a0dddf519956e0e3c23c7de1ff159ee2c097","tarball":"https://registry.npmjs.org/@darrenjrobinson/hibp-mcp/-/hibp-mcp-1.0.4.tgz","fileCount":7,"unpackedSize":22024,"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@darrenjrobinson%2fhibp-mcp@1.0.4","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIFTE7j8nuN8uRROcbLtUtvxDw12giu58LU5qBwLstZLRAiEAkmedUfxd8ymt3UOkAXx3eXKQ6zw5Syw+eezfG7HvYu4="}]},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:90e13e8c-23c4-4c14-87a2-3176bcc4ab45"}},"directories":{},"maintainers":[{"name":"darrenjrobinson","email":"darren@darrenjrobinson.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/hibp-mcp_1.0.4_1788766517160_0.46445050472574434"},"_hasShrinkwrap":false}},"time":{"created":"2025-04-02T00:21:07.801Z","modified":"2026-09-07T07:35:17.604Z","1.0.0":"2025-04-02T00:21:08.107Z","1.0.1":"2025-04-02T00:34:45.103Z","1.0.2":"2025-04-02T00:53:07.552Z","1.0.3":"2026-03-10T20:34:56.040Z","1.0.4":"2026-09-07T07:35:17.280Z"},"bugs":{"url":"https://github.com/darrenjrobinson/HIBP-MCP-Server/issues"},"author":{"name":"Darren J Robinson"},"license":"MIT","homepage":"https://github.com/darrenjrobinson/HIBP-MCP-Server#readme","keywords":["mcp","hibp","haveibeenpwned","claude","ai"],"repository":{"type":"git","url":"git+https://github.com/darrenjrobinson/HIBP-MCP-Server.git"},"description":"A Model Context Protocol (MCP) server for the Have I Been Pwned (HIBP) API","maintainers":[{"name":"darrenjrobinson","email":"darren@darrenjrobinson.com"}],"readme":"# Have I Been Pwned MCP Server\n\n[![npm version](https://img.shields.io/npm/v/@darrenjrobinson/hibp-mcp)](https://www.npmjs.com/package/@darrenjrobinson/hibp-mcp)\n[![npm downloads](https://img.shields.io/npm/dt/@darrenjrobinson/hibp-mcp)](https://www.npmjs.com/package/@darrenjrobinson/hibp-mcp)\n[![license](https://img.shields.io/badge/license-MIT-blue)](LICENSE)\n\nA Model Context Protocol (MCP) server for the Have I Been Pwned (HIBP) API that allows you to query breach data using natural language.\n\n## Overview\n\nThis MCP server provides tools to interact with the Have I Been Pwned API, allowing you to:\n\n- Check if an email address has been in a data breach\n- Get details about specific breaches\n- Check if a password has been exposed in known data breaches\n- Check if an email address appears in pastes\n\n[GitHub Repo](https://github.com/darrenjrobinson/HIBP-MCP-Server)\n\n[NPM Package](https://www.npmjs.com/package/@darrenjrobinson/hibp-mcp)\n\n[Blog](https://blog.darrenjrobinson.com/a-have-i-been-pwned-mcp-server-for-claude)\n\n\n\n## Installation & Configuration\n\n### Option 1: NPM Installation (Recommended)\n\n1. Install Node.js (v22.10.0 or higher recommended)\n2. Get your HIBP API key from https://haveibeenpwned.com/API/Key\n3. Configure your MCP client (e.g., Claude Desktop ) with:\n\n```json\n{\n \"mcpServers\": {\n \"HIBP-MCP\": {\n \"command\": \"npx\",\n \"args\": [\"-y\", \"@darrenjrobinson/hibp-mcp\"],\n \"env\": {\n \"HIBP_API_KEY\": \"\",\n \"HIBP_SUBSCRIPTION_PLAN\": \"Pwned 1\"\n }\n }\n }\n}\n```\n\n### Option 2: Local Development\n\n1. Clone this repository:\n```bash\ngit clone https://github.com/darrenjrobinson/HIBP-MCP-Server.git\n```\n2. Install dependencies:\n```bash\ncd HIBP-MCP-Server\nnpm install\n```\n3. Build the project:\n```bash\nnpm run build\n```\n4. Configure your MCP client with:\n```json\n{\n \"mcpServers\": {\n \"HIBP-MCP\": {\n \"command\": \"node\",\n \"args\": [\"path/to/hibp-mcp/build/main.js\"],\n \"env\": {\n \"HIBP_API_KEY\": \"\",\n \"HIBP_SUBSCRIPTION_PLAN\": \"Pwned 1\"\n }\n }\n }\n}\n```\n\n### Environment Variables\n\n| Name | Description |\n|------|-------------|\n| `HIBP_API_KEY` | Your Have I Been Pwned API key |\n| `HIBP_SUBSCRIPTION_PLAN` | Your HIBP API subscription plan (Pwned 1, Pwned 2, Pwned 3, Pwned 4, or Pwned 5) |\n\n## Usage Examples\n\nOnce configured, you can ask Claude natural language questions about data breaches. Here are some examples:\n\n### Checking Email Breaches\n- \"Has email address test@example.com appeared in any data breaches?\"\n- \"What breaches contain the email address test@example.com?\"\n- \"Show me all breaches for test@example.com\"\n\n### Checking Specific Breaches\n- \"Tell me about the LinkedIn data breach\"\n- \"What data was exposed in the Adobe breach?\"\n- \"List all known data breaches\"\n\n### Checking Passwords\n- \"Has the password 'Password123' been exposed in any breaches?\"\n- \"Is my password 'MySecurePass2024' safe to use?\"\n- \"Check if this password has been compromised: 'TestPass1234'\"\n\n### Checking Pastes\n- \"Has test@example.com appeared in any pastes?\"\n- \"Show me paste data for test@example.com\"\n\n## Tools\n\n### HIBP-Breaches\n\nQuery breached accounts and breaches from the Have I Been Pwned API.\n\nParameters:\n- `operation`: The HIBP operation to perform (getAllBreachesForAccount, getAllBreachedSites, getBreachByName, getDataClasses)\n- `account`: Email address to check for breaches (required for getAllBreachesForAccount)\n- `domain`: Domain to filter breaches by (optional)\n- `name`: Breach name to get details for (required for getBreachByName)\n- `includeUnverified`: Whether to include unverified breaches (optional)\n- `truncateResponse`: Whether to truncate the response (optional)\n\n### HIBP-Pastes\n\nQuery pastes containing account data from the Have I Been Pwned API.\n\nParameters:\n- `account`: Email address to check for pastes (required)\n\n### HIBP-PwnedPasswords\n\nCheck if a password has been exposed in data breaches using the Pwned Passwords API.\n\nParameters:\n- `password`: Password to check (will be hashed locally before sending and only the first 5 characters sent)\n\n## Security Note\n\nPasswords checked through the HIBP-PwnedPasswords tool are never sent in plain text. They are hashed locally using SHA-1, and only the first 5 characters of the hash are sent to the API using k-anonymity.\n\n## Contributing\n\nContributions are welcome! Please feel free to submit a Pull Request.\n\n## License\n\nMIT\n\n## Author\n\n[Darren J Robinson](https://blog.darrenjrobinson.com)\n","readmeFilename":"Readme.MD"}