{"generated_at":"2026-08-17T10:36:11+00:00","item":{"added_at":"2026-07-05","analysis_method":"capability_triage","category":"Web Connector","description":"Search email addresses and domains against the world's most widely used data breach corpus. Have I Been Pwned helps individuals determine whether their accounts have appeared in known breaches and ena","did":"ant-dir-have-i-been-pwned","homepage_url":"https://haveibeenpwned.com/","icon":"https://haveibeenpwned.com/favicon.ico","id":"ant.dir.have.i.been.pwned","installs":10799,"last_scanned":"2026-07-05","license":"","long_description":"Search email addresses and domains against the world's most widely used data breach corpus. Have I Been Pwned helps individuals determine whether their accounts have appeared in known breaches and enables organisations to investigate exposure across verified domains. Explore detailed breach information, identify exposed data types, review paste and stealer log exposure, and gain trusted security intelligence to better understand account compromise and cyber risk.","name":"Have I Been Pwned","plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=ant-dir-have-i-been-pwned&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","publisher":"Have I Been Pwned","publisher_url":"https://haveibeenpwned.com/","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"The connector can query breach, paste, and stealer-log exposure for specific emails/domains, which may reveal sensitive personal or organizational security incident information.","risk_type":"reads_private_data","severity":"medium","title":"Reads your private information"},{"description":"Email addresses, domains, and related identifiers you query are sent to the Have I Been Pwned service to retrieve results.","risk_type":"forwards_data_to_third_party","severity":"low","title":"Sends your data to outside companies"},{"description":"The connector can send domain verification emails, which could contact recipients on your behalf and create unintended disclosure or social engineering risk.","risk_type":"sends_messages_as_you","severity":"medium","title":"Can send messages as you"}],"signature_status":"unknown","source_code_reviewed":false,"tags":["forwards_data_to_third_party","reads_private_data","sends_messages_as_you"],"tools":[{"description":"Lists known breaches in the Have I Been Pwned corpus.","name":"hibp_list_breaches"},{"description":"Fetches detailed information about a specific breach by name.","name":"hibp_get_breach"},{"description":"Retrieves the most recently added breach information.","name":"hibp_get_latest_breach"},{"description":"Lists the types of data classes exposed in breaches (e.g., emails, passwords, IPs).","name":"hibp_list_data_classes"},{"description":"Checks whether passwords appear in the Pwned Passwords dataset using a k-anonymity range query.","name":"hibp_get_pwned_passwords_range"},{"description":"Checks whether a specific account/email appears in known breaches and returns associated breach details.","name":"hibp_get_breached_account"},{"description":"Checks a range/prefix of account identifiers for breach matches (bulk-style lookup).","name":"hibp_get_breached_account_range"},{"description":"Retrieves paste-site exposure information for a specific account/email.","name":"hibp_get_paste_account"},{"description":"Retrieves breach exposure information for a verified domain.","name":"hibp_get_breached_domain"},{"description":"Lists domains associated with the subscription (typically verified/monitored domains).","name":"hibp_list_subscribed_domains"},{"description":"Returns the current API/subscription status information.","name":"hibp_get_subscription_status"},{"description":"Retrieves stealer-log exposure records associated with a specific email address.","name":"hibp_get_stealer_logs_by_email"},{"description":"Retrieves stealer-log exposure records associated with a specific website domain.","name":"hibp_get_stealer_logs_by_website_domain"},{"description":"Retrieves stealer-log exposure records associated with a specific email domain.","name":"hibp_get_stealer_logs_by_email_domain"},{"description":"Generates a DNS token used to verify ownership/control of a domain.","name":"hibp_generate_domain_verification_dns_token","risk":{"category":"privilege","level":"medium","why":"Generating verification tokens supports proving domain control and could be misused to facilitate unauthorized domain verification workflows if access is abused."}},{"description":"Verifies a previously generated DNS token to confirm domain ownership/control.","name":"hibp_verify_domain_verification_dns_token","risk":{"category":"privilege","level":"medium","why":"Completing domain verification changes verification state/authority and could enable broader access to domain-level breach data if misused."}},{"description":"Sends a domain verification email to confirm control over a domain via email-based verification.","name":"hibp_send_domain_verification_email","risk":{"category":"sends_externally","level":"medium","why":"This sends an outbound verification email, which can contact external recipients and may unintentionally disclose or be abused for spam/social engineering."}}],"tools_count":17,"type":"web_connector","url":"https://claude.ai/directory/da758d89-9c8b-4f6c-a5bf-65eb14b9fc21","uuid":"da758d89-9c8b-4f6c-a5bf-65eb14b9fc21","version":""},"query_key":"have i been pwned have i been pwned","schema_version":1,"status":"match"}