# XposedOrNot Breach Intelligence Muse connector

From musedirectory.ai, the independent directory of Meta Muse connectors. Not affiliated with Meta.

## XposedOrNot Breach Intelligence

Check if your email was exposed in a data breach and see your exposure history.

- Record: https://musedirectory.ai/connector/xposedornot-breach-intelligence
- Category: Health
- Developer: XposedOrNot (https://xposedornot.com/mcp)
- Muse status: Extra setup. Not in Muse's Connectors list yet. Muse can still use it: its page gives you a request to paste into Muse.
- Health: Working, 113ms, checked 2026-10-29T11:00:49Z
- Endpoint: https://api.xposedornot.com/mcp
- Auth: No account needed; Pricing: unknown
- Screening: Screened, no issues found (2026-10-28T18:36:41Z)
- Source: Found in the official MCP Registry (com.xposedornot/xposedornot) https://registry.modelcontextprotocol.io/v0/servers?search=com.xposedornot%2Fxposedornot

Looks up whether your email address appears in known public data breaches. Shows which breaches exposed you, when they happened, what data was exposed, and your overall risk score. Helps you understand if you need to change passwords or monitor accounts.

Example request: "Check if my email was in any data breaches and see what information was exposed."

How to connect: Not in Muse's Connectors list yet, but Muse can still use it. Paste this into Muse: "Use XposedOrNot Breach Intelligence to help me. It is a free service with an MCP server at https://api.xposedornot.com/mcp. It does not need an API key. Ask me before you share anything with it." Muse asks before it shares anything with the app's site. Meta does not review apps used this way, so only use ones you trust. We tested this in the Muse app on September 24, 2026: Muse used an app's link directly this way and returned a live answer.

Tools:
- check_email_breaches: Check whether an email address appears in the XposedOrNot index of known public data breaches. Returns the list of breach names only. Never returns passwords.
- get_breach_analytics: Get a detailed breach history for one email address: the breaches it appeared in with dates and descriptions, exposure broken down by industry and by year, risk scoring, and any paste exposure. Never returns passwords.
- list_breaches: List breaches in the XposedOrNot catalog, optionally filtered by the breached company domain or by a specific breach ID. Returns breach name, date, industry, record count, categories of data exposed and a reference URL.
- domain_breach_summary: Get an aggregate breach summary for a domain, including the number of breaches, affected email accounts, pastes, and the most recent breach date. Returns only counts, not individual email addresses.
- get_breach_metrics: Get system-wide breach statistics: total breaches and records indexed, breaches per year and industry, the largest and most recent breaches, and when the latest breach was added.
- get_recent_breaches: Get the breaches most recently added to XposedOrNot, newest first. Returns title, date, a short summary and a URL for each.

Screening checks:
- MCP handshake: pass (Answered in 231ms)
- Domain against threat feeds (Cloudflare security DNS): pass (api.xposedornot.com, xposedornot.com not flagged)
- Published packages against the OSV malicious-package database: n/a (No npm or PyPI package published)
- Hidden instructions or invisible characters in tool text: pass (6 tools read, nothing found)
- Inputs asking for passwords, card numbers or seed phrases: pass (None found)
- Domain and redirects: pass (Domain registered 3332 days ago)
- AI review of purpose and tool behavior: pass (No concerns)