Password Breach Check
localpassword-breach-tools
Check whether a password has leaked in a known breach via HaveIBeenPwned. Uses k-anonymity so the plaintext never leaves this process.
Included in every Nova Skills API key. Nothing to install — get a bearer token and this skill is available on your MCP endpoint.
Tools (2)
- password_breach_checkCheck whether a password has appeared in known breach dumps via HaveIBeenPwned (k-anonymity — only a hash prefix is sent, plaintext stays local). Returns breach count.
- password_email_breachCheck whether an email has appeared in known breach dumps. NOTE: the full HIBP breach-by-email API requires a paid key — this uses only the free public status endpoint.