Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "xposedornot": {
      "type": "http",
      "url": "https://api.xposedornot.com/mcp"
    }
  }
}

claude mcp add --transport http xposedornot https://api.xposedornot.com/mcp

[mcp_servers.xposedornot]
url = "https://api.xposedornot.com/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "xposedornot": {
      "type": "remote",
      "url": "https://api.xposedornot.com/mcp",
      "enabled": true
    }
  }
}

{
  "mcpServers": {
    "xposedornot": {
      "type": "http",
      "url": "https://api.xposedornot.com/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=xposedornot&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vYXBpLnhwb3NlZG9ybm90LmNvbS9tY3AifQ%3D%3D"
}

{
  "servers": {
    "xposedornot": {
      "type": "http",
      "url": "https://api.xposedornot.com/mcp"
    }
  }
}

{
  "mcpServers": {
    "xposedornot": {
      "httpUrl": "https://api.xposedornot.com/mcp"
    }
  }
}

extensions:
  "xposedornot":
    enabled: true
    name: "xposedornot"
    type: streamable_http
    uri: "https://api.xposedornot.com/mcp"
    timeout: 300

Quality 86 / 100good

protocol75 · weight 25

warn
protocol.modernnewest supported version is 2025-06-18; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
n/a
protocol.statelessonly applies to 2026-07-28 servers
pass
protocol.transportstreamable HTTP
n/a
protocol.list_ttlonly applies to 2026-07-28 servers

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene100 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
pass
tools.annotations6 of 6 tools declare readOnlyHint or destructiveHint
pass
tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
pass
tools.token_costabout 687 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stability75 · weight 15

warn
stability.changes12 tool changes in 30 days
pass
stability.rug_pullno tool changed its meaning under the same name

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

6 tools, about 687 tokens to load them all · tool set a2ad5ef0a43d · tools last changed 2026-10-10 · checked 2026-10-20 19:42 UTC

Tool changes

2026-10-10get_recent_breachesadded
Get the breaches most recently added to XposedOrNot, newest first. Returns title, date, a short summary and a URL for each.
2026-10-10get_breach_metricsadded
Get system-wide breach statistics: total breaches and records indexed, breaches per year and industry, the largest and most recent breaches, and when the latest breach was added.
2026-10-10domain_breach_summaryadded
Get an aggregate breach summary for a domain, including the number of breaches, affected email accounts, pastes, and the most recent breach date. Returns only counts, not individual email addresses.
2026-10-10list_breachesadded
List breaches in the XposedOrNot catalog, optionally filtered by the breached company domain or by a specific breach ID. Returns breach name, date, industry, record count, categories of data exposed and a reference URL.
2026-10-10get_breach_analyticsadded
Get a detailed breach history for one email address: the breaches it appeared in with dates and descriptions, exposure broken down by industry and by year, risk scoring, and any paste exposure. Never returns passwords.
2026-10-10check_email_breachesadded
Check whether an email address appears in the XposedOrNot index of known public data breaches. Returns the list of breach names only. Never returns passwords.
2026-10-07get_recent_breachesremoved
Get the breaches most recently added to XposedOrNot, newest first. Returns title, date, a short summary and a URL for each.
2026-10-07get_breach_metricsremoved
Get system-wide breach statistics: total breaches and records indexed, breaches per year and industry, the largest and most recent breaches, and when the latest breach was added.
2026-10-07domain_breach_summaryremoved
Get an aggregate breach summary for a domain, including the number of breaches, affected email accounts, pastes, and the most recent breach date. Returns only counts, not individual email addresses.
2026-10-07list_breachesremoved
List breaches in the XposedOrNot catalog, optionally filtered by the breached company domain or by a specific breach ID. Returns breach name, date, industry, record count, categories of data exposed and a reference URL.

Showing the latest 10. Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 100 / 100

provenance100

liveness100

freshness100

hygiene100

+repository +namespace-matches-repo +dns-namespace +website +reachable +uptime-100% +updated-17d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://api.xposedornot.com/mcp` streamable-http	none	yes	100%	294 ms	2025-06-18	2026-10-20

Tools (6)

`check_email_breaches`read-only	Check whether an email address appears in the XposedOrNot index of known public data breaches. Returns the list of breach names only. Never returns passwords.
`domain_breach_summary`read-only	Get an aggregate breach summary for a domain, including the number of breaches, affected email accounts, pastes, and the most recent breach date. Returns only counts, not individual email addresses.
`get_breach_analytics`read-only	Get a detailed breach history for one email address: the breaches it appeared in with dates and descriptions, exposure broken down by industry and by year, risk scoring, and any paste exposure. Never returns passwords.
`get_breach_metrics`read-only	Get system-wide breach statistics: total breaches and records indexed, breaches per year and industry, the largest and most recent breaches, and when the latest breach was added.
`get_recent_breaches`read-only	Get the breaches most recently added to XposedOrNot, newest first. Returns title, date, a short summary and a URL for each.
`list_breaches`read-only	List breaches in the XposedOrNot catalog, optionally filtered by the breached company domain or by a specific breach ID. Returns breach name, date, industry, record count, categories of data exposed and a reference URL.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "com.xposedornot/xposedornot",
  "title": "XposedOrNot Breach Intelligence",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://api.xposedornot.com/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "2.0.0",
  "repository": {
    "url": "https://github.com/XposedOrNot/XposedOrNot-API",
    "source": "github"
  },
  "websiteUrl": "https://xposedornot.com/mcp",
  "description": "Real-time data-breach lookup and analytics for emails and domains from XposedOrNot."
}