io.github.troyhunt/hibp

name:io.github.troyhunt/hibp

Breach intelligence API: email search, domain monitoring, passwords and stealer logs.

transport:: remote
credential class:: self-provisionable

Owner verification

Not yet verified. Verifying proves you control this server and is free, permanently — it never changes a published score.

Start verification →

Tools

hibp_generate_domain_verification_dns_token
Generate the TXT record value required to verify domain control via DNS. Requires an authenticated subscription with domain-verification access.
shallow
hibp_get_breach
Look up a single public HIBP breach by its canonical breach name, such as Adobe.
shallow
hibp_get_breached_account
Search HIBP for breaches affecting a single email address. This tool requires an OAuth bearer token.
shallow
hibp_get_breached_account_range
Query the authenticated HIBP k-anonymity breached-account range endpoint with the first 6 characters of a SHA-1 email hash.
shallow
hibp_get_breached_domain
Return breached aliases for a verified domain. This tool requires an authorized subscription via OAuth bearer token.
shallow
hibp_get_latest_breach
Return the most recently added public breach currently loaded into HIBP.
shallow
hibp_get_paste_account
Search for public pastes containing an email address. This tool requires an OAuth bearer token.
shallow
hibp_get_pwned_passwords_range
Query the public Pwned Passwords k-anonymity API with a 5-character SHA-1 or NTLM prefix and return matching suffixes with prevalence counts.
shallow
hibp_get_stealer_logs_by_email
Return website domains observed in stealer logs for an email address. Requires an authenticated subscription with stealer-log access.
shallow
hibp_get_stealer_logs_by_email_domain
Return email aliases and associated website domains observed in stealer logs for an email domain. Requires an authenticated subscription with stealer-log access.
shallow
hibp_get_stealer_logs_by_website_domain
Return email addresses observed in stealer logs for a website domain. Requires an authenticated subscription with stealer-log access.
shallow
hibp_get_subscription_status
Return the current subscription details and feature flags for the authenticated OAuth-linked HIBP subscription.
shallow
hibp_list_breaches
List public HIBP breaches, optionally filtered by domain, spam-list flag, and verification status.
shallow
hibp_list_data_classes
List the data classes used across public HIBP breach models, such as email addresses or passwords.
shallow
hibp_list_subscribed_domains
List the domains associated with the authenticated HIBP subscription.
shallow
hibp_send_domain_verification_email
Send a domain verification email to an approved alias such as admin or security. Requires an authenticated subscription with domain-verification access.
shallow
hibp_verify_domain_verification_dns_token
Complete domain verification by checking the expected HIBP TXT record on the target domain. Requires an authenticated subscription with domain-verification access.
shallow

Embed this server’s score

Tool count and median score across every tool in this server’s corpus — honest in a way a single cherry-picked tool’s badge wouldn’t be.

[![Vouch score](https://vouch.tools/api/servers/79f6ccb5-544a-4eee-8b87-88094212c7b7/badge.svg)](https://vouch.tools/servers/79f6ccb5-544a-4eee-8b87-88094212c7b7)