XposedOrNot Breach Intelligence

Measured conclusion: Alive, not deep-tested. L2 outcome: not_attempted.

Real-time data-breach lookup and analytics for emails and domains from XposedOrNot.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "XposedOrNot Breach Intelligence": {
      "url": "https://api.xposedornot.com/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (6)

• check_email_breaches read-only

  Check whether an email address appears in the XposedOrNot index of known public data breaches. Returns the list of breach names only. Never returns passwords.

  Parameters:

  • email (required) — string — Email address to check for breaches

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• get_breach_analytics read-only

  Get a detailed breach history for one email address: the breaches it appeared in with dates and descriptions, exposure broken down by industry and by year, risk scoring, and any paste exposure. Never returns passwords.

  Parameters:

  • email (required) — string — Email address to get analytics for

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• list_breaches read-only

  List breaches in the XposedOrNot catalog, optionally filtered by the breached company domain or by a specific breach ID. Returns breach name, date, industry, record count, categories of data exposed and a reference URL.

  Parameters:

  • limit — integer — Maximum breaches to return, default 25
  • domain — string — Optional domain of the breached company, for example adobe.com
  • breach_id — string — Optional specific breach identifier, for example Adobe

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• domain_breach_summary read-only

  Get an aggregate breach summary for a domain, including the number of breaches, affected email accounts, pastes, and the most recent breach date. Returns only counts, not individual email addresses.

  Parameters:

  • domain (required) — string — Domain to summarize breaches for

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• get_breach_metrics read-only

  Get system-wide breach statistics: total breaches and records indexed, breaches per year and industry, the largest and most recent breaches, and when the latest breach was added.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• get_recent_breaches read-only

  Get the breaches most recently added to XposedOrNot, newest first. Returns title, date, a short summary and a URL for each.

  Parameters:

  • limit — integer — Maximum breaches to return, default 10

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

Publisher website Repository

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.