Password Breach Check

local

password-breach-tools

Check whether a password has leaked in a known breach via HaveIBeenPwned. Uses k-anonymity so the plaintext never leaves this process.

Included in every Nova Skills API key. Nothing to install — get a bearer token and this skill is available on your MCP endpoint.

Tools (2)

  • password_breach_check
    Check whether a password has appeared in known breach dumps via HaveIBeenPwned (k-anonymity — only a hash prefix is sent, plaintext stays local). Returns breach count.
  • password_email_breach
    Check whether an email has appeared in known breach dumps. NOTE: the full HIBP breach-by-email API requires a paid key — this uses only the free public status endpoint.