check_password

Pack: hibp · Endpoint: https://gateway.pipeworx.io/hibp/mcp

Check whether a password appears in known breach corpora. Uses k-anonymity: the password is SHA-1ed locally, only the first 5 hex chars leave the worker, and the response is filtered to match the rest. Returns pwned count (0 = not seen). The password itself is never transmitted.

Parameters

NameTypeRequiredDescription
passwordstringyesPassword to check (stays inside the worker)

Example call

curl -X POST https://gateway.pipeworx.io/hibp/mcp \
  -H 'Content-Type: application/json' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"check_password","arguments":{}}}'

Connect

Add this to your MCP client config, or use one-click install buttons:

{
  "mcpServers": {
    "hibp": {
      "url": "https://gateway.pipeworx.io/hibp/mcp"
    }
  }
}

See Getting Started for client-specific install steps.

Regenerated from source · build May 12, 2026