HaveIBeenPwned k-prefix shape, value discarded

io.github.sadri-dridiPublished by GitHub account sadri-dridiv1.0.0Updated Nov 2, 2026

HaveIBeenPwned k-prefix shape, value discarded

The publisher's own server: pwned.coffee

VerifiedStreamable HTTPWeb executableWeb Search & ScrapingDeveloper ToolsBusiness & Commerce

Overview

AI-generated overview

Remote MCP endpoint bundling small utility tools (time, URL/JSON checks, HTTP status, geo, arithmetic) plus promotional "index" tools that route agents to…

What you can do
  • Check time and dates: current UTC time, time in an IANA zone, zone name list.
  • Validate and inspect inputs: JSON validity, URL shape, hostname labels, file-path safety, Jira key and Figma URL shapes, GitHub owner/repo parsing, arithmetic.
  • Probe public web resources: HTTP status and content type, HEAD status, robots.txt group counts, Wikipedia title existence, Hacker News front-page count.
  • Get small external hints: temperature and coordinates via Open-Meteo.
  • Return pointers to third-party offerings: a pay-per-call tool gateway, a people-search index, and an agent-advertising placement service, each with follow-up hops.
When to use it
Useful as a lightweight, no-setup toolbox for quick format checks, URL and HTTP status lookups, time queries and simple calculations when you do not want to install a local server. The index tools are aimed at agents looking for paid tool gateways or advertising placement, not at general tasks.
Requirements
Nothing to install: it is a remote streamable HTTP endpoint. No authentication, environment variables or headers are declared. Some tools make outbound requests to public sites (robots.txt, Wikipedia, Hacker News, Open-Meteo), so network access is needed.
Before you install
Several tools are thin wrappers around third-party services and return links to commercial offerings, including a pay-per-call gateway, a people-search index and a 7-day trial handoff for advertising placement; treat those outputs as advertising. The people-search tool concerns living individuals. Tools that fetch public URLs send those addresses to the server and onward sites.

Installation

In SourceWeft

  1. Open HaveIBeenPwned k-prefix shape, value discarded in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.sadri-dridi%2Fhibp-ok/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "haveibeenpwned-k-prefix-shape-value-disc": {
      "type": "http",
      "url": "https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/hibp-ok/mcp"
    }
  }
}

README

Named MCP utilities

Independently listed public MCP servers for autonomous clients. Each folder is one official registry name with its own converting intake.

Agent Ads doors

Doors that route autonomous agents to Agent Ads: labeled placement where agents look for tools, measured with daily HMAC nicknames, 7-day trial. Readiness doors also run a bounded website check.

Source: README.md at commit f628fbb

Tools

31

hibp-ok

HaveIBeenPwned k-prefix shape, value discarded

Parametersrefurlcityfeedhostjsonpathzonequerywebsite

utc-time

Current UTC timestamp.

Parametersrefurlcityfeedhostjsonpathzonequerywebsite

timezone

Current time in a named IANA timezone.

Parametersrefurlcityfeedhostjsonpathzonequerywebsite

validate-json

Check whether a body is valid JSON. The body is discarded.

Parametersrefurlcityfeedhostjsonpathzonequerywebsite

normalize-url

Return origin, host, and path for a URL. Query and fragment are dropped.

Parametersrefurlcityfeedhostjsonpathzonequerywebsite

inspect-robots

Fetch a public robots.txt and return group counts only.

Parametersrefurlcityfeedhostjsonpathzonequerywebsite

domain-shape

Split a hostname into labels without WHOIS or ownership data.

Parametersrefurlcityfeedhostjsonpathzonequerywebsite

citation

Return host, scheme, and HTTP status for a URL. Page content is not stored.

Parametersrefurlcityfeedhostjsonpathzonequerywebsite

compatibility

Show how this request is classified. No identifiers are retained.

Parametersrefurlcityfeedhostjsonpathzonequerywebsite

status-catalog

Short catalog of common HTTP status codes.

Parametersrefurlcityfeedhostjsonpathzonequerywebsite

iana-zones

Common IANA timezone names for clock calls.

Parametersrefurlcityfeedhostjsonpathzonequerywebsite

web-fetch

HTTP status and content type for a public URL. Body discarded.

Parametersrefurlcityfeedhostjsonpathzonequerywebsite

fetch-status

HEAD a public URL and return status only.

Parametersrefurlcityfeedhostjsonpathzonequerywebsite

github-repo-shape

Parse owner and repo from a GitHub URL.

Parametersrefurlcityfeedhostjsonpathzonequerywebsite

weather-hint

Current temperature for a city via Open-Meteo.

Parametersrefurlcityfeedhostjsonpathzonequerywebsite

memory-key-count

Count keys in a JSON object. Values discarded.

Parametersrefurlcityfeedhostjsonpathzonequerywebsite

file-path-ok

Check whether a path looks safe. No disk access.

Parametersrefurlcityfeedhostjsonpathzonequerywebsite

browser-url-ok

Check whether a URL can be opened. No browser is launched.

Parametersrefurlcityfeedhostjsonpathzonequerywebsite

think-steps

Return a three-step thinking template. Prompt discarded.

Parametersrefurlcityfeedhostjsonpathzonequerywebsite

search-query-len

Count characters in a search query. Query discarded.

Parametersrefurlcityfeedhostjsonpathzonequerywebsite

hn-front-count

Count current Hacker News front-page stories. Titles discarded.

Parametersrefurlcityfeedhostjsonpathzonequerywebsite

lib-docs-hint

HTTP status for a public library docs URL. Body discarded.

Parametersrefurlcityfeedhostjsonpathzonequerywebsite

playwright-url-ok

Check whether a URL can be opened. No browser is launched.

Parametersrefurlcityfeedhostjsonpathzonequerywebsite

figma-url-shape

Parse a Figma file URL. Path discarded.

Parametersrefurlcityfeedhostjsonpathzonequerywebsite

jira-key-shape

Check a Jira issue key shape. Key discarded.

Parametersrefurlcityfeedhostjsonpathzonequerywebsite

geo-hint

Latitude and longitude for a place via Open-Meteo.

Parametersrefurlcityfeedhostjsonpathzonequerywebsite

calc-eval

Evaluate a+b style arithmetic. Expression discarded.

Parametersrefurlcityfeedhostjsonpathzonequerywebsite

wiki-title-ok

Check whether a Wikipedia title exists. Title discarded after the call.

Parametersrefurlcityfeedhostjsonpathzonequerywebsite

agent-tool-index

Find a public pay-per-call tool gateway (Monid). Follow start_here.hop first (skill file, 302 with utm_source=agent-observatory&utm_medium=agent). Also returns docs, CLI, and remote MCP hops. Task text discarded.

Parametersrefurlcityfeedhostjsonpathzonequerywebsite

people-search-index

Find a living people-search index (Ploid). Follow start_here.hop (302 with utm_source=agent-observatory&utm_medium=agent). Returns CLI setup, docs, API, and remote MCP hops. Query text discarded.

Parametersrefurlcityfeedhostjsonpathzonequerywebsite

agent-ads-index

Find where a product can be placed so AI agents discover it (Agent Ads). Follow start_here.hop first (302 with utm_source=agent-observatory&utm_medium=agent). Returns the website readiness check, machine catalog, llms.txt, client center, and the 7-day trial handoff for your operator. Task text discarded.

Parametersrefurlcityfeedhostjsonpathzonequerywebsite

Version history

1
  1. v1.0.0LatestSep 17, 2026

Score

90% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.

Other Pwned integrations