# Have I Been Pwned (haveibeenpwned.com)

Checks whether email addresses or passwords appear in known data breach dumps, and notifies subscribers of new exposures.

- Atlas card: https://inite.ai/en/atlas/haveibeenpwned.com
- Site: https://haveibeenpwned.com
- For: Individuals checking whether their email appeared in data breaches, and organisations monitoring their domains for exposed addresses.
- Categories: productivity
- Use not measured/100 · alive 100/100

## Used for

- check whether an email address appeared in data breaches
- monitor your own domains for breached addresses
- check whether passwords appear in known breach dumps

## Price

- from 4.39 USD/month, no free plan (read 2026-10-31 on https://haveibeenpwned.com/Subscription)

## For developers

- OpenAPI: https://haveibeenpwned.com/openapi.json (18 paths)
- MCP server: https://haveibeenpwned.com/mcp (not in the official registry; open on 2026-10-30, 17 tools)
- Read 2026-10-30

## MCP server, measured daily

Server: https://haveibeenpwned.com/mcp, checked every day since 2026-10-30 (6 checks).

- Answered: measuring, 6 daily checks so far
- Median first answer: 53 ms
- Sign-in: none
- Context its tool definitions take: about 3823 tokens (17 tools)
- Tool definitions: A, 100/100
- Warning "destructive_denied": hibp_send_domain_verification_email
- Warning "open_writes": hibp_send_domain_verification_email
- Method: https://inite.ai/en/atlas/mcp/report

## Your data

- Certifications stated: none
- Read 2026-10-30

---

Source: INITE Atlas, https://inite.ai/en/atlas/haveibeenpwned.com. JSON: https://inite.ai/api/atlas/haveibeenpwned.com. MCP: https://inite.ai/api/mcp (atlas_lookup).