XposedOrNot MCP server

Which servers in the official MCP registry are XposedOrNot's own, whether they answer, and what they offer. A program checked each of these, nobody copied them from a product page.

read 2026-10-16

← Back to XposedOrNot

Whose server it is

Registry namecom.xposedornot/xposedornotverified in the MCP registry

The registry name sits under xposedornot.com. The registry only lets a publisher use that namespace after proving control of the domain through DNS or HTTP.

When we asked itchecked 2026-10-16

Stateanswerschecked 2026-10-16
Tools6
Server calls itselfXON_MCP
Server version2.0.0
Protocol version2025-06-18

On 2026-10-16 the server answered initialize and tools/list without a sign-in. First answer in 265 ms.

Tools it offers6 tools · read 2026-10-16

check_email_breaches
Check whether an email address appears in the XposedOrNot index of known public data breaches. Returns the list of breach names only. Never returns passwords.
get_breach_analytics
Get a detailed breach history for one email address: the breaches it appeared in with dates and descriptions, exposure broken down by industry and by year, risk scoring, and any paste exposure. Never returns passwords.
list_breaches
List breaches in the XposedOrNot catalog, optionally filtered by the breached company domain or by a specific breach ID. Returns breach name, date, industry, record count, categories of data exposed and a reference URL.
domain_breach_summary
Get an aggregate breach summary for a domain, including the number of breaches, affected email accounts, pastes, and the most recent breach date. Returns only counts, not individual email addresses.
get_breach_metrics
Get system-wide breach statistics: total breaches and records indexed, breaches per year and industry, the largest and most recent breaches, and when the latest breach was added.
get_recent_breaches
Get the breaches most recently added to XposedOrNot, newest first. Returns title, date, a short summary and a URL for each.

How to connect

Add the server to your MCP client config. Claude Desktop, Cursor and most other clients read this shape:

{
  "mcpServers": {
    "xposedornot": {
      "type": "http",
      "url": "https://api.xposedornot.com/mcp"
    }
  }
}

Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.