XposedOrNot Breach Intelligence

com.xposedornot/xposedornotVersion 2.0.0

Real-time data-breach lookup and analytics for emails and domains from XposedOrNot.

Status

Responds332 msNov 14, 2026, 14:23 UTCAnswered our handshake without sign-in.

Registry data may be out of date

We could not refresh it, so this page shows the last copy.

Last checked: Nov 14, 2026, 14:23 UTC
Latency: 332 ms
Remotes responding: 1 of 1
Sign-in: No sign-in
Hosting: Hosted outside the EU (detected)
Registry data as of: Nov 14, 2026, 22:14 UTC

Data from the official MCP Registry, checked by run.zero. How we check

Connect

Streamable HTTP

https://api.xposedornot.com/mcpResponds332 msNov 14, 2026, 14:23 UTC

No sign-in

Claude Code

claude mcp add --transport http xposedornot https://api.xposedornot.com/mcp

Claude Desktop and claude.ai

1
2
3

Settings > Connectors > Add custom connector
Name: xposedornot
Remote MCP server URL: https://api.xposedornot.com/mcp

Cursor

{
  "mcpServers": {
    "xposedornot": {
      "url": "https://api.xposedornot.com/mcp"
    }
  }
}

VS Code

code --add-mcp '{"name":"xposedornot","type":"http","url":"https://api.xposedornot.com/mcp"}'

Built your own server? run.zero hosts MCP servers on European infrastructure.

Host your own MCP server on run.zero

Tools

6 tools

Tools of XposedOrNot Breach Intelligence
	Description		Read-only	Idempotent	Open world
`check_email_breaches`Check whether an email address appears in the XposedOrNot index of known public data breaches. Returns the list of breach names only. Never returns passwords.	Check whether an email address appears in the XposedOrNot index of known public data breaches. Returns the list of breach names only. Never returns passwords.	No	Yes	Yes	Yes
`domain_breach_summary`Get an aggregate breach summary for a domain, including the number of breaches, affected email accounts, pastes, and the most recent breach date. Returns only counts, not individual email addresses.	Get an aggregate breach summary for a domain, including the number of breaches, affected email accounts, pastes, and the most recent breach date. Returns only counts, not individual email addresses.	No	Yes	Yes	Yes
`get_breach_analytics`Get a detailed breach history for one email address: the breaches it appeared in with dates and descriptions, exposure broken down by industry and by year, risk scoring, and any paste exposure. Never returns passwords.	Get a detailed breach history for one email address: the breaches it appeared in with dates and descriptions, exposure broken down by industry and by year, risk scoring, and any paste exposure. Never returns passwords.	No	Yes	Yes	Yes
`get_breach_metrics`Get system-wide breach statistics: total breaches and records indexed, breaches per year and industry, the largest and most recent breaches, and when the latest breach was added.	Get system-wide breach statistics: total breaches and records indexed, breaches per year and industry, the largest and most recent breaches, and when the latest breach was added.	No	Yes	Yes	Yes
`get_recent_breaches`Get the breaches most recently added to XposedOrNot, newest first. Returns title, date, a short summary and a URL for each.	Get the breaches most recently added to XposedOrNot, newest first. Returns title, date, a short summary and a URL for each.	No	Yes	Yes	Yes
`list_breaches`List breaches in the XposedOrNot catalog, optionally filtered by the breached company domain or by a specific breach ID. Returns breach name, date, industry, record count, categories of data exposed and a reference URL.	List breaches in the XposedOrNot catalog, optionally filtered by the breached company domain or by a specific breach ID. Returns breach name, date, industry, record count, categories of data exposed and a reference URL.	No	Yes	Yes	Yes

Details

Registry status: Active
Published: Oct 3, 2026
Updated: Oct 3, 2026
Website: https://xposedornot.com/mcp⁠ (opens in a new tab)
Repository: https://github.com/XposedOrNot/XposedOrNot-API⁠ (opens in a new tab)
Categories (suggested): Data and analyticsSuggested categories are assigned automatically from the registry text and may be wrong. Verified operators can correct them.
GDPR: Not declared

Are you the operator? Claim this listing