- BREACHES
- PASTES
- RISK
- HUMAN
Short answer
How can I check if my email has been in a data breach?
Give your AI an email address and it will scan breach databases and public pastes for any leaked credentials. You'll get a clear list of exactly which breaches your data appeared in.
Where your data leaks land.
The results of your scan.
The AI categorizes findings based on how your information was exposed.
BREACHES
Known database leaks
The AI identifies specific, large-scale data breaches where your email was part of a leaked dataset.
PASTES
Public text exposures
The AI finds instances where your email appeared in public text pastes or forum dumps.
RISK
Exposure severity
Your agent evaluates the nature of the leaks to help you understand which accounts need immediate password changes.
HUMAN
Manual remediation
You decide which accounts to secure and which passwords to rotate based on the AI's report.
The workflow
What your AI does when the email arrives.
Your agent acts as a bridge between your questions and massive security databases.
Identify breaches
The AI looks for your email in massive, known collections of leaked account information.
search_account_breachesScan public pastes
The agent checks for your email address within public text dumps and paste sites.
search_account_pastesAggregate results
The AI pulls all findings into a single, readable summary for you to review.
search_account_breachessearch_account_pastesReport findings
Your agent presents the specific breach names and details so you can take action.
search_account_breaches
Try it
Copy these to start.
Use these prompts to begin your security audit.
Starting points
Replace the email addresses in these prompts with the ones you want to check.
Have I Been Pwned Connector
You're all set. Choose your MCP client and follow the setup instructions.
https://edge.vinkius.com/vk_preview_sMA0l35Ca22YXDFphuzvJ8zBvh4k5c4TwRKFbcfW/mcpClaude Desktop
Follow the steps below to connect in seconds.
- 1In Claude Desktop, open Settings → Connectors.
- 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
- 3Click Add and start a new chat — Have I Been Pwned capabilities are ready to use.
{
"mcpServers": {
"have-i-been-pwned-mcp": {
"url": "https://edge.vinkius.com/vk_preview_sMA0l35Ca22YXDFphuzvJ8zBvh4k5c4TwRKFbcfW/mcp"
}
}
}Check if the email user@example.com has been involved in any data breaches.
Scan for any public pastes containing the email address dev@company.org.
List all known breaches associated with my personal email, mail@provider.net.
Are there any recent leaks involving the email address admin@startup.io?
Claude
ChatGPT
Cursor
VS Code
Windsurf
Claude Code
JetBrains
Cline
Start here
Connect Have I Been Pwned once, then ask.
Just link the MCP to your client. Your credentials stay encrypted and secure on our side.
Connect Have I Been Pwned to your AIFAQ
How this task behaves.
- 01
Can the AI delete my data from these breaches?
No. The AI can only search and report on existing leaks. It has no power to remove data from third-party databases.
- 02
Can the AI change my passwords for me?
No. The AI identifies the risk, but you must manually change your passwords on the affected websites.
- 03
Does the AI search the entire internet?
No. It specifically searches known breach databases and public paste sites via the provided tools.
- 04
Will the AI notify me if my email is leaked in the future?
No. This tool is for on-demand checks. You must ask your agent to run a scan to see new information.
- 05
Can I check a phone number instead of an email?
No. The available tools are designed specifically to search for email addresses.
More questions about Have I Been Pwned? The Connector page answers them. See everything the Have I Been Pwned Connector can do
Connect Have I Been Pwned to Claude, Cursor, ChatGPT & more
