hibp — Claude Code MCP server: breach checks in chat
An MCP server that wires the Have I Been Pwned API into your coding agent. Handy when you want a breach lookup without leaving the editor.
claude mcp add hibp -e HIBP_API_KEY=<HIBP_API_KEY> -e HIBP_SUBSCRIPTION_PLAN=<HIBP_SUBSCRIPTION_PLAN> -- npx -y @darrenjrobinson/hibp-mcpWhat hibp does
The server exposes the Have I Been Pwned API to your agent, so a question about an address or a domain gets answered in the same conversation.
It runs through npx -y @darrenjrobinson/hibp-mcp, so there is nothing to install globally. Two environment variables are required: HIBP_API_KEY and HIBP_SUBSCRIPTION_PLAN. Without the key the server cannot reach the API, and the plan value tells it which endpoints your subscription covers.
Setup differs by platform. Claude and Claude take a claude mcp add or codex mcp add line, Cursor and GitHub Copilot use a JSON block in their config, and Gemini CLI gets a gemini mcp add command.
What it helps with
- check an address for breaches without opening a browser
- see whether a domain shows up in HIBP data
- pull a breach summary into the agent's reply
- keep breach lookups inside the IDE workflow
Example prompts for the agent
- Check [email protected] against hibp
- What breaches are known for example.com?
- Run this list of addresses through hibp and flag the matches
How to install hibp
Platform CLI
claude mcp add hibp -e HIBP_API_KEY=<HIBP_API_KEY> -e HIBP_SUBSCRIPTION_PLAN=<HIBP_SUBSCRIPTION_PLAN> -- npx -y @darrenjrobinson/hibp-mcpReplace <…> with your own values
Platform CLI
codex mcp add hibp --env HIBP_API_KEY=<HIBP_API_KEY> --env HIBP_SUBSCRIPTION_PLAN=<HIBP_SUBSCRIPTION_PLAN> -- npx -y @darrenjrobinson/hibp-mcpReplace <…> with your own values
Config file
{
"mcpServers": {
"hibp": {
"command": "npx",
"args": [
"-y",
"@darrenjrobinson/hibp-mcp"
],
"env": {
"HIBP_API_KEY": "<HIBP_API_KEY>",
"HIBP_SUBSCRIPTION_PLAN": "<HIBP_SUBSCRIPTION_PLAN>"
}
}
}
}Replace <…> with your own values
Config file
{
"servers": {
"hibp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@darrenjrobinson/hibp-mcp"
],
"env": {
"HIBP_API_KEY": "<HIBP_API_KEY>",
"HIBP_SUBSCRIPTION_PLAN": "<HIBP_SUBSCRIPTION_PLAN>"
}
}
}
}Replace <…> with your own values
Platform CLI
gemini mcp add -e HIBP_API_KEY=<HIBP_API_KEY> -e HIBP_SUBSCRIPTION_PLAN=<HIBP_SUBSCRIPTION_PLAN> hibp npx -y @darrenjrobinson/hibp-mcpReplace <…> with your own values
Step by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about hibp
How do I install hibp in Claude Code?
Run claude mcp add hibp -e HIBP_API_KEY=<HIBP_API_KEY> -e HIBP_SUBSCRIPTION_PLAN=<HIBP_SUBSCRIPTION_PLAN> -- npx -y @darrenjrobinson/hibp-mcp. A second form uses --env flags with --transport stdio.
What does hibp do?
It is an MCP server for the Have I Been Pwned API, giving your agent a way to look up breach data.
What does hibp need to run?
An API key in HIBP_API_KEY and your plan in HIBP_SUBSCRIPTION_PLAN. Both are passed when you add the server.
