Claude security directory

Have I Been Pwned

Published by Have I Been Pwned

Medium risk

Search email addresses and domains against the world's most widely used data breach corpus. Have I Been Pwned helps individuals determine whether their accounts have appeared in known breaches and enables organisations to investigate exposure across verified domains. Explore detailed breach information, identify exposed data types, review paste and stealer log exposure, and gain trusted security intelligence to better understand account compromise and cyber risk.

Security assessment

Plutonium assessed this web connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: The connector can query breach, paste, and stealer-log exposure for specific emails/domains, which may reveal sensitive personal or organizational security incident information.
  • Sends your data to outside companies: Email addresses, domains, and related identifiers you query are sent to the Have I Been Pwned service to retrieve results.
  • Can send messages as you: The connector can send domain verification emails, which could contact recipients on your behalf and create unintended disclosure or social engineering risk.

Available capabilities

This add-on exposes 17 tools or capabilities.

  • hibp_list_breaches
  • hibp_get_breach
  • hibp_get_latest_breach
  • hibp_list_data_classes
  • hibp_get_pwned_passwords_range
  • hibp_get_breached_account
  • hibp_get_breached_account_range
  • hibp_get_paste_account
  • hibp_get_breached_domain
  • hibp_list_subscribed_domains
  • hibp_get_subscription_status
  • hibp_get_stealer_logs_by_email
  • hibp_get_stealer_logs_by_website_domain
  • hibp_get_stealer_logs_by_email_domain
  • hibp_generate_domain_verification_dns_token
  • hibp_verify_domain_verification_dns_token
  • hibp_send_domain_verification_email

The interactive security report will load automatically.