How do I install Have I Been Pwned?

Pick a client above and copy the generated config. Cursor and VS Code also have a deep link when the server can run locally or remotely.

Is Have I Been Pwned official?

No. Registry-listed is not the same as vendor-official. Read the methodology for the difference.

This listing scores 47 (Fair). The formula is published on the methodology page.

Have I Been Pwned MCP Server | MCPpedia

Name: Have I Been Pwned MCP Server
Author: troyhunt

Breach intelligence API: email search, domain monitoring, passwords and stealer logs.

RegistryRemotetroyhunt

47Fair

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "troyhunt-hibp": {
      "url": "https://haveibeenpwned.com/mcp"
    }
  }
}

This server does not declare environment variables.

Tools show up when the registry metadata or the repository README lists them. GitHub enrichment fills this in when a token is configured.

77Good

MCP server for Firecrawl — web search, scraping, and biomedical/arXiv paper search.

RegistryRemotefirecrawl7.6K stars