Have I Been Pwned

Ask an agent to

• Check if my email appears in any known data breaches
• Check whether this password has been exposed in a breach
• Show what data was leaked in the LinkedIn breach

4 tools

When we loaded haveibeenpwned.com again on Oct 24, 2026, it registered these through navigator.modelContext or provideContext(), from earlier WebMCP drafts. Chrome 154 only offers document.modelContext, so Chrome’s own agent support does not see them.

• check-password-pwnedread-only

  Check if a password has been exposed in a known data breach using the k-anonymity Pwned Passwords API. The password is hashed with SHA-1 in the browser; only the first 5 characters of the hash are sent to the API.…

  password: string

• navigate-to-sectionread-only

  Navigate to a section of the Have I Been Pwned website.

  section: string

• search-breaches-for-emailread-only

  Search Have I Been Pwned for data breaches linked to an email address. If the breach search form is present on the current page it is pre-filled and the search is initiated; otherwise navigates to the home page with…

  email: string

• view-breach-detailsread-only

  Navigate to the detail page for a specific data breach to learn what data was compromised, how many addresses were affected, and what happened.

  name: string