search_exposureCheck email or domain exposure
Search ransomware and breach data for one authorized target. Get a bounded summary of matches and up to 10 related sources.
Read-only · one target per search Model Context ProtocolProfessional and above
Exposure intelligence.
Inside your AI workflow.
Check authorized exposure data directly in ChatGPT or Claude.
Available for Professional, Agency and Gov. Sign in with your existing account.
Your AI workspaceExample
You
Check the exposure of example.org.
Have I Been Ransomed? MCP
Exposure summary
Matches found for this authorized domain.
- Matching records
- 7
- Related sources
- 2
source_01Ransomware / breaches
source_02Ransomware / breaches
Illustrative data. This example does not run a live search.
- Access starts at
- Professional
- Look up
- Emails & domains
- Sources per search
- Up to 10
- MCP searches per account
- 100 / day
From a question to a useful answer
Your investigation, in context.
MCP connects an AI assistant to a small set of tools in your account. Your permissions stay in control.
- 01
Connect your account
Add https://haveibeenransom.com/mcp to ChatGPT or Claude, then sign in and review the requested access.
- 02
Ask about an authorized target
Start with your verified account email. Additional emails and domains require verified access from our team.
- 03
Review the exposure
Receive counts and related source identifiers. Use the summary to guide the next step in your investigation.
Two focused tools
A clear scope for your assistant.
get_limitsSee your remaining allowance
Check the account's plan, daily quota and MCP allowance, so your assistant can keep its requests within your limits.
Account-aware · usage limits Controlled accessThe right context.
The right context.
The permissions you grant.
MCP returns exposure summaries. Passwords, cookies, raw documents and full dataset exports are outside its scope.
Permissions checked on every request
Account, organization, plan and target access are checked before a result can be returned.
A connection you can revoke
Authorization is tied to your account. Access can be withdrawn when permissions or account status change.
Bounded searches and results
Up to 100 MCP searches per day per account, with additional rate limits and up to 10 sources per search.
Before you connect
A few useful details.
Can I connect my assistant today?
Use https://haveibeenransom.com/mcp as the server URL in your client’s connector settings. Choose OAuth and automatic client registration. Sign in on our website and review the consent screen. You can manage or revoke connections at any time. The examples on this page use illustrative data.
Which plans include MCP access?
MCP is available with Professional, Cybersecurity Agency and Gov. Investigator and Basic do not include it. See the plan comparison for eligibility.
Does Clear Data unlock raw results through MCP?
No. MCP provides exposure counts and source identifiers, including on plans with Clear Data. It does not return passwords, cookies, raw files or complete datasets.
Can I still use the REST API directly?
Yes. The REST API remains a separate integration for your own applications and scripts. Its endpoints and examples are in the API documentation.
Professional and above
Compare plans Find the right plan for your workflow.
MCP access starts at Professional. Compare the features available with each plan.