XposedOrNot Breach Intelligence — Claude Code MCP server: breach
A remote MCP server that gives your agent access to breach data: check an email or domain and see whether it appeared in known leaks.
claude mcp add --transport http xposedornot https://api.xposedornot.com/mcpWhat XposedOrNot Breach Intelligence does
The server connects to the XposedOrNot API at https://api.xposedornot.com/mcp and exposes tools for email checks, breach analytics, known breach listings and metrics. Basic endpoints like /v1/check-email and /v1/breach-analytics need no key, so a quick address check works out of the box.
Domains are different. Domain breach data is only available after you verify ownership: sign in at xposedornot.com, open the CxO Dashboard, verify the domain, then grab a key under API Key Management. The key goes in the x-api-key header, and the call itself is a POST to /v1/domain-breaches/ with no body. Without a verified domain that endpoint returns nothing.
Rate limits apply per IP, per endpoint: GET /v1/check-email/{email} allows 2 requests per second, 25 per hour and 100 per day. Exceed it and you get 429 Too Many Requests with a Retry-After header plus retry_after and reset_time in the body, so a client can back off precisely. If you're building a product on this data, xonAPI+ paid plans start at $5/month with limits up to 25,000 requests per minute.
What it helps with
- check whether an email shows up in known breaches
- see which leaks affect a specific domain
- pull breach metrics for a report
- subscribe to fresh breach updates via RSS
- size up a leak before rotating passwords
Example prompts for the agent
- Check
[email protected]with XposedOrNot and list the breaches it appears in - Give me breach analytics for
[email protected] - List known breaches for the domain
example.com
How to install XposedOrNot Breach Intelligence
Platform CLI: remote server
claude mcp add --transport http xposedornot https://api.xposedornot.com/mcpPlatform CLI: remote server
codex mcp add xposedornot-breach-intelligence --url https://api.xposedornot.com/mcpConfig file
{
"mcpServers": {
"xposedornot-breach-intelligence": {
"url": "https://api.xposedornot.com/mcp"
}
}
}Config file
{
"servers": {
"xposedornot-breach-intelligence": {
"type": "http",
"url": "https://api.xposedornot.com/mcp"
}
}
}Platform CLI: remote server
gemini mcp add -t http xposedornot-breach-intelligence https://api.xposedornot.com/mcpStep by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about XposedOrNot Breach Intelligence
How do I install XposedOrNot Breach Intelligence in Claude Code?
Run claude mcp add --transport http xposedornot https://api.xposedornot.com/mcp to add it as a remote HTTP MCP server.
What does XposedOrNot Breach Intelligence do?
It gives your agent tools to check emails and domains against a database of known breaches, plus analytics and metrics on incidents.
Do I need an API key?
Basic email checks need no key. A key is only required for domain monitoring, and you get one after verifying domain ownership in the CxO Dashboard.
