{"id":"67747b60-cb7b-441f-aa80-6d0f47a28172","name":"HaveIBeenPwned","slug":"haveibeenpwned","description":"Passwords which have previously been exposed in data breaches","website_url":"https://haveibeenpwned.com/API/v3","category":["security","data"],"score":{"overall":72,"raw":72,"capped":false,"verified":false,"breakdown":{"latency":6,"consistency":8,"doc_quality":8,"error_clarity":7,"auth_simplicity":5,"token_efficiency":8,"first_try_success":6,"response_parseability":8},"source":"prowl","credential_tested":false,"probe_health":{"status":"healthy","up_pct":1.0,"samples":4,"target":"website","p50_latency_ms":140,"last_probed":"2026-10-17T03:04:50.150627+00:00","lookback_hours":24,"no_response":0}},"latency":null,"uptime_30d":null,"protocols":["rest"],"auth_type":null,"mcp_manifest_url":null,"openapi_spec_url":null,"verified":false,"domain_verified":false,"claimed":false,"vendor_id":null,"status":"active","profile":null,"pricing":{"notes":"No free API tier; subscription required for API v3, but website UI free","free_tier":false,"tier_based":true,"monthly_cost_usd":3.5},"last_crawled":"2026-10-16T11:14:37.974745+00:00","last_benchmarked":"2026-08-12T22:17:16.909605+00:00","supports_x402":false,"agent_auth_methods":null,"supports_streaming":false,"has_sandbox":false,"sdks":null,"llms_txt_url":null,"similarity_score":null,"telemetry_evidence":null,"agent_signal":null,"mycelio":{"signed":false,"source":"heuristic","outline":[{"id":"api-documentation","depth":1,"heading":"API Documentation","preview":"The API allows pwned email addresses and passwords to be quickly searched via a RESTful service","size_bytes":95},{"id":"index","depth":2,"heading":"Index","preview":"","size_bytes":0},{"id":"overview","depth":2,"heading":"Overview","preview":"","size_bytes":0},{"id":"base-url","depth":3,"heading":"Base URL","preview":"Unless stated otherwise, all APIs documented below can be found after the base URL:  GET https://haveibeenpwned.com/api/…","size_bytes":442},{"id":"authorisation","depth":3,"heading":"Authorisation","preview":"Authorisation is required for all APIs that enable searching HIBP by email address or domain, namely…","size_bytes":1555},{"id":"mcp-server","depth":3,"heading":"MCP Server","preview":"Have I Been Pwned also publishes an MCP server for AI agents and MCP-capable clients.                     It exposes HIB…","size_bytes":535},{"id":"casing","depth":3,"heading":"Casing","preview":"Unless stated otherwise, all APIs are case-insensitive. They may be represented in                     camel case in the…","size_bytes":375},{"id":"test-api-key","depth":3,"heading":"Test API key","preview":"Where supported, a test API key can be used instead of a paid subscription.                     Test keys provide limite…","size_bytes":354},{"id":"specifying-the-api-version","depth":3,"heading":"Specifying the API version","preview":"Version 3 of the API is consumable only by specifying the API version in the URL. All API                     endpoints…","size_bytes":189},{"id":"specifying-the-user-agent","depth":3,"heading":"Specifying the user agent","preview":"Each request to the API must be accompanied by a user agent request header. Typically, this                     should b…","size_bytes":534},{"id":"plan-specific-features","depth":3,"heading":"Plan-specific features","preview":"Different API endpoints are available depending on your subscription tier. Throughout this                     documenta…","size_bytes":418},{"id":"email-address-search","depth":2,"heading":"Email Address Search","preview":"","size_bytes":0},{"id":"overview-2","depth":3,"heading":"Overview","preview":"The most common use of the API is to return a list of all breaches a particular email address has                     be…","size_bytes":570},{"id":"getting-all-breaches-for-an-email-address-core-pro-high-rpm","depth":3,"heading":"Getting all breaches for an email address\n                    \n                      Core\n                      Pro\n                      High RPM","preview":"The API takes a single parameter and searches directly for that email address.                     The address is not ca…","size_bytes":4810},{"id":"getting-all-breaches-for-a-hash-range-using-k-anonymity-pro-","depth":3,"heading":"Getting all breaches for a hash range using k-anonymity\n                    \n                      Pro\n                      High RPM","preview":"Searching directly for an email address means sending personally identifiable data                     to the HIBP API.…","size_bytes":2709},{"id":"domain-search","depth":2,"heading":"Domain Search","preview":"","size_bytes":0},{"id":"overview-3","depth":3,"heading":"Overview","preview":"Domain searches allow organisations to assess their overall breach exposure by retrieving                       all emai…","size_bytes":1274},{"id":"verifying-via-dns-pro","depth":3,"heading":"Verifying via DNS\n                      \n                        Pro","preview":"Verifying control of a domain by adding and verifying a DNS records via the API is the                       most fully…","size_bytes":2941},{"id":"verifying-via-email-pro","depth":3,"heading":"Verifying via email\n                      \n                        Pro","preview":"Where DNS verification isn't feasible, verification via an approval email is an alternative approach.…","size_bytes":1448},{"id":"getting-all-breached-email-addresses-for-a-domain-core-pro","depth":3,"heading":"Getting all breached email addresses for a domain\n                      \n                        Core\n                        Pro","preview":"All email addresses on a given domain and the breaches they've appeared in can be returned                       via the…","size_bytes":2354},{"id":"getting-all-subscribed-domains-core-pro","depth":3,"heading":"Getting all subscribed domains\n                      \n                        Core\n                        Pro","preview":"Domains that have been successfully added to the domain search dashboard                       after verifying control a…","size_bytes":2674},{"id":"breaches","depth":2,"heading":"Breaches","preview":"","size_bytes":0},{"id":"getting-all-breached-sites-in-the-system","depth":3,"heading":"Getting all breached sites in the system","preview":"A \"breach\" is an instance of a system having been compromised by an attacker and                         the data disclo…","size_bytes":1406},{"id":"getting-a-single-breached-site-by-name","depth":3,"heading":"Getting a single breached site by name","preview":"Sometimes just a single breach is required and this can be retrieved by the breach                         \"Name\". This…","size_bytes":343},{"id":"getting-the-most-recently-added-breach","depth":3,"heading":"Getting the most recently added breach","preview":"Often, it's most efficient to monitor for new breaches before performing other actions, for                         exam…","size_bytes":741}],"readiness":80,"fetched_at":1786573033,"affordances":[{"kind":"link","label":"https://haveibeenpwned.com/","target":"https://haveibeenpwned.com/"},{"kind":"link","label":"Dashboard","target":"https://haveibeenpwned.com/Dashboard"},{"kind":"link","label":"Who's Been Pwned","target":"https://haveibeenpwned.com/PwnedWebsites"},{"kind":"link","label":"Passwords","target":"https://haveibeenpwned.com/Passwords"},{"kind":"link","label":"Notify Me","target":"https://haveibeenpwned.com/NotifyMe"},{"kind":"link","label":"API","target":"https://haveibeenpwned.com/API/v3"},{"kind":"link","label":"Demos","target":"https://haveibeenpwned.com/Demos"},{"kind":"link","label":"Pricing","target":"https://haveibeenpwned.com/Subscription"},{"kind":"link","label":"Who, What & Why","target":"https://haveibeenpwned.com/About"},{"kind":"link","label":"FAQs","target":"https://haveibeenpwned.com/FAQs"},{"kind":"link","label":"Terms of Use","target":"https://haveibeenpwned.com/TermsOfUse"},{"kind":"link","label":"Privacy Policy","target":"https://haveibeenpwned.com/Privacy"},{"kind":"link","label":"Opt Out","target":"https://haveibeenpwned.com/OptOut"},{"kind":"link","label":"the API key page","target":"https://haveibeenpwned.com/API/Key"},{"kind":"link","label":"MCP Server documentation","target":"https://haveibeenpwned.com/Docs/MCP"},{"kind":"link","label":"sensitive","target":"https://haveibeenpwned.com/FAQs#SensitiveBreach"},{"kind":"link","label":"retired","target":"https://haveibeenpwned.com/FAQs#RetiredBreach"},{"kind":"link","label":"unverified","target":"https://haveibeenpwned.com/FAQs#UnverifiedBreach"},{"kind":"link","label":"Understanding Have I Been Pwned's Use of SHA-1 and k-Anonymity","target":"https://www.troyhunt.com/understanding-have-i-been-pwneds-use-of-sha-1-and-k-anonymity/"},{"kind":"link","label":"dashboard","target":"https://haveibeenpwned.com/Dashboard/Redirect/Domains"},{"kind":"link","label":"Cloudflare's \"Create DNS Record\" API","target":"https://developers.cloudflare.com/api/resources/dns/subresources/records/methods/create/"},{"kind":"link","label":"spam list","target":"https://haveibeenpwned.com/FAQs#SpamList"},{"kind":"link","label":"the domain remains searchable throughout the subscription period even if the volume of breached email addresses grows beyond the subscription's scope","target":"https://www.troyhunt.com/welcome-to-the-new-have-i-been-pwned-domain-search-subscription-service/"},{"kind":"link","label":"click here to test","target":"https://haveibeenpwned.com/api/v3/breaches"},{"kind":"link","label":"test","target":"https://haveibeenpwned.com/api/v3/breaches?Domain=adobe.com"},{"kind":"link","label":"test","target":"https://haveibeenpwned.com/api/v3/breaches?IsSpamList=true"},{"kind":"link","label":"click here to test","target":"https://haveibeenpwned.com/api/v3/breach/Adobe"},{"kind":"link","label":"click here to test","target":"https://haveibeenpwned.com/api/v3/latestBreach"},{"kind":"link","label":"click here to test","target":"https://haveibeenpwned.com/api/v3/dataClasses"},{"kind":"link","label":"fabricated","target":"https://haveibeenpwned.com/FAQs#FabricatedBreach"}],"ttl_seconds":86400,"content_length":51546},"featured":false,"sponsored":false,"source":null}