INDIVIDUAL MCP TOOL

get_recent_breaches

Get the breaches most recently added to XposedOrNot, newest first.

xposedornot.comnone authenticationAvailability not checked

LIVE ENDPOINT

https://api.xposedornot.com/mcp

No auth detected

Connect to this endpoint to inspect the live schema for get_recent_breaches and invoke it with your own arguments.

{}

Inferred read-only · medium confidence · heuristic, not a guarantee.

No write-capable action terms were found; this is not proof that invocation has no side effects.

CONNECT WITH APPROVAL

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.xon_mcp]
url = "https://api.xposedornot.com/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "xon_mcp": {
      "type": "http",
      "url": "https://api.xposedornot.com/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: xon_mcp
Remote MCP URL: https://api.xposedornot.com/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "xon_mcp": {
      "url": "https://api.xposedornot.com/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "xon_mcp": {
      "type": "http",
      "url": "https://api.xposedornot.com/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "xon_mcp",
  "transport": "streamable-http",
  "url": "https://api.xposedornot.com/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

check_email_breaches — Check whether an email address appears in the XposedOrNot index of known public data breaches.
get_breach_analytics — Get a detailed breach history for one email address: the breaches it appeared in with dates and descriptions, exposure broken down by industry and by year, risk scoring, and any paste exposure.
list_breaches — List breaches in the XposedOrNot catalog, optionally filtered by the breached company domain or by a specific breach ID.
domain_breach_summary — Get an aggregate breach summary for a domain, including the number of breaches, affected email accounts, pastes, and the most recent breach date.
get_breach_metrics — Get system-wide breach statistics: total breaches and records indexed, breaches per year and industry, the largest and most recent breaches, and when the latest breach was added.