Security & Testing

checkleaked.cc

Searches breach databases such as LeakCheck and Dehashed for leaked credentials and personal information, with authentication and health-check tools.

1 endpoint41 known toolsFirst detected September 20, 2026Last detected September 20, 2026

ENDPOINT 1

https://mcp.checkleaked.cc/mcp

No auth detected

MCP server metadata

Name: checkleaked-mcp-server
Version: 1.1.0

Capabilities

tools.listChangedresources.listChanged

Known tools 41

checkleaked_verify_auth

Verify the API key is valid and return subscription info (role, expiration date)

Inferred read-only

checkleaked_ping

Health check — verify API connectivity and key validity

Inferred read-only

checkleaked_leak_check

Search the LeakCheck breach database.

Inferred read-only

checkleaked_dehashed

Search the Dehashed breach database by email, username, ip_address, name, address, phone, vin, or free-text

Potential side effects

checkleaked_experimental

Search experimental / Snusbase databases by username, mass, email, lastip, password, name, or hash

Potential side effects

checkleaked_crack_hash

Crack a password hash (MD5, SHA1, SHA256, NTLM, etc.) using rainbow tables and breach data

Inferred read-only

checkleaked_ip_lookup

Get geolocation, ISP, and network info for an IP address.

Inferred read-only

checkleaked_ghunt

OSINT lookup on a Gmail address via Google Hunt — profile info, linked services, profile picture.

Inferred read-only

checkleaked_tracking_new

Create a new tracking entry to monitor for future data breaches

Potential side effects

checkleaked_tracking_delete

Delete a tracking entry by ID

Potential side effects

checkleaked_tracking_limits

Get your tracking limits (max entries, current usage)

Inferred read-only

checkleaked_tracking_entries

List all tracking entries for the authenticated user

Inferred read-only

checkleaked_tracking_history

Get breach history for a specific tracking entry

Inferred read-only

checkleaked_tracking_result

Get the detailed result for a specific tracking history entry

Inferred read-only

checkleaked_tracking_clean

Remove stale or invalid tracking entries from your account

Potential side effects

checkleaked_leakradar_raw_search

Search the raw stealer-log corpus.

Inferred read-only

checkleaked_leakradar_raw_parts

List the sequential blocks (parts) available for one raw entry, so you can page through a large file and pick a seq to read.

Inferred read-only

checkleaked_leakradar_raw_part

Read the content of ONE specific raw block by container_id + entry_path + seq — this is how you see the actual leaked data for a single hit.

Inferred read-only

checkleaked_leakradar_raw_search_lines

Search raw stealer logs, unlock the matched blocks, and return the parsed leak records matching the query in one call.

Inferred read-only

checkleaked_leakradar_email_search

Search credential leaks for an email address or username.

Potential side effects

checkleaked_leakradar_advanced_search

Advanced credential-leak search with structured filters (username/password/url/email facets, strength, date window).

Potential side effects

checkleaked_leakradar_domain_summary

Aggregate breach exposure for a domain (employees / customers / third-parties counts).

Inferred read-only

checkleaked_leakradar_dark_web_search

Search indexed dark-web forum/market posts by a simple query or advanced field filters.

Inferred read-only

checkleaked_leakradar_pwned

Check whether a password appears in breach data.

Inferred read-only

checkleaked_leakradar_password_range

Return the breach-occurrence range for a SHA-1 hash prefix (>=5 hex chars) — a low-cost k-anonymity building block.

Inferred read-only

checkleaked_leakradar_unlock

Unlock specific leak records by their ids (from a search result's items[].id).

Inferred read-only

checkleaked_leakradar_task_status

Get the status of a LeakRadar background task (async unlock / export).

Inferred read-only

checkleaked_domain_whois

WHOIS / registration lookup for a domain — registrar, creation/expiry dates, name servers, status.

Inferred read-only

checkleaked_breach_info

Registry record for ONE breach by name (HIBP-style: Name, Title, Domain, BreachDate, PwnCount, DataClasses, Description, Sources).

Inferred read-only

checkleaked_breaches_search

Search the breach registry by name/domain/description.

Inferred read-only

checkleaked_pwned_password

Check whether a password appears in known breaches WITHOUT sending it: the SHA-1 is computed inside the MCP process, only its first 5 hex chars are sent (k-anonymity range query, HIBP-style) and the suffix is matched locally.

Inferred read-only

checkleaked_email_breach_kanon

Free breach teaser for an email address WITHOUT sending the address: SHA-256 of the lowercased, trimmed email is computed inside the MCP process and only its first 24 hex chars are sent.

Potential side effects

checkleaked_name_insight

Gender, origin and meaning insight for a personal name found in a leak (offline dictionary + Wikidata/Wikipedia).

Inferred read-only

checkleaked_news_latest

Latest CheckLeaked cybersecurity briefing (daily news post).

Potential side effects

checkleaked_webhook_get

Show the account's tracking webhook — url, enabled, secret_hint (last 4 chars), fail_count, last_status / last_error / last_attempt / last_success — or null when none is configured.

Inferred read-only

checkleaked_webhook_set

Create or update the account's tracking webhook.

Potential side effects

checkleaked_webhook_test

Send one signed test `tracking.finding` event (payload test=true) to the configured webhook, no retries.

Potential side effects

checkleaked_webhook_delete

Delete the account's tracking webhook: stops all deliveries and discards the secret.

Potential side effects

checkleaked_private_bots_get

List the account's private Discord / Telegram bots — per platform: state (stopped / starting / online / error), enabled, bot_username, bot_id, token_hint (last 4 chars), last_error, last_started and invite_url (Discord) — plus plan_ok (Pro / Plus required), configured (server-side token key present) and max_per_platform (1).

Inferred read-only

checkleaked_private_bot_set

Create, replace or pause/resume the account's private bot on one platform.

Potential side effects

checkleaked_private_bot_delete

Remove the account's private bot on one platform: stops it and discards the encrypted token.

Potential side effects

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.checkleaked-mcp-server]
url = "https://mcp.checkleaked.cc/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "checkleaked-mcp-server": {
      "type": "http",
      "url": "https://mcp.checkleaked.cc/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: checkleaked-mcp-server
Remote MCP URL: https://mcp.checkleaked.cc/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "checkleaked-mcp-server": {
      "url": "https://mcp.checkleaked.cc/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "checkleaked-mcp-server": {
      "type": "http",
      "url": "https://mcp.checkleaked.cc/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "checkleaked-mcp-server",
  "transport": "streamable-http",
  "url": "https://mcp.checkleaked.cc/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Loading Trust v2 evidence…

Checking the associated registrable domain. The BuiltWith key remains server-side.

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.