Skip to main content

Read-only breach-intelligence MCP: reports THAT a domain was breached and which data types leaked, from public feeds (HaveIBeenPwned, ransomwatch). Never the leaked data.

Project description

data-breach-detector

A read-only breach-intelligence MCP server. It answers "has this domain been breached, what's the recent breach news, how severe is this threat text" from public threat-intelligence disclosure feeds — and reports intelligence, not contents: the existence, timing, scale, category and exposed data-types of a breach, never the leaked records themselves.

Built for defenders. Comparable in spirit to HaveIBeenPwned's own directory.

What it does not do

  • No arbitrary URL fetch, no crawl, no proxy — no general scraping primitives.
  • No .onion marketplace access, no transactions.
  • Never returns the raw text of a dump, paste or leak. A redaction layer strips emails, hashes, IPs, crypto addresses and credential-shaped tokens from every string returned.

Sources (public, no key)

  • HaveIBeenPwned /api/v3/breaches — the public breach directory: domain, breach date, pwn count, and the categories of data exposed.
  • ransomwatch (joshhighet/ransomwatch) — public ransomware leak-site tracker.

Tools

tool what it returns
breach_news(since_days, sector, limit) recent disclosures — entity, date, scale, exposed data types, severity
check_exposure(query) does a domain/company appear in breach data — yes/no + metadata
assess_threat(text) classify a piece of security text — level, categories, action (no network)
feed_sources() which feeds are aggregated + cache freshness

Run

pip install data-breach-detector

data-breach-detector           # stdio (for MCP clients)
data-breach-detector --http    # streamable-HTTP on 127.0.0.1:8790/mcp

Or point an MCP client at the config:

{ "mcpServers": { "data_breach_detector": {
  "command": "data-breach-detector"
} } }

License

MIT. The breach data belongs to its sources (HaveIBeenPwned, ransomwatch); this tool only aggregates their public disclosure metadata, with attribution.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

data_breach_detector-0.1.1.tar.gz (8.8 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

data_breach_detector-0.1.1-py3-none-any.whl (10.6 kB view details)

Uploaded Python 3

File details

Details for the file data_breach_detector-0.1.1.tar.gz.

File metadata

  • Download URL: data_breach_detector-0.1.1.tar.gz
  • Upload date:
  • Size: 8.8 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.14

File hashes

Hashes for data_breach_detector-0.1.1.tar.gz
Algorithm Hash digest
SHA256 b19186eeb28d841e5600109718e6451540684b267fa7d0f9f62a85c954255d8d
MD5 20ac77868b6fba63221213fc78a936fe
BLAKE2b-256 af8c2d35cc9c6fcfa77ef41bb94da9cf9ab212fe26d52c7c77449998cb430806

See more details on using hashes here.

Provenance

The following attestation bundles were made for data_breach_detector-0.1.1.tar.gz:

Publisher: publish-pypi.yml on beepboop2025/data-breach-detector

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file data_breach_detector-0.1.1-py3-none-any.whl.

File metadata

File hashes

Hashes for data_breach_detector-0.1.1-py3-none-any.whl
Algorithm Hash digest
SHA256 7960f41b39f72a8b8889db93144b094cd5372f39dcb033c46e2f5e0e15e446f4
MD5 a274221a4c46054eb5beac81e1b52d64
BLAKE2b-256 b890ac6ebc6160e9ea2d689f72c93b23a3bd6c95b97bbccea666d152cea10904

See more details on using hashes here.

Provenance

The following attestation bundles were made for data_breach_detector-0.1.1-py3-none-any.whl:

Publisher: publish-pypi.yml on beepboop2025/data-breach-detector

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page