# Pwned Passwords API

> Pwned Passwords API on Apizie: 1 endpoint (Hash range) returned as clean JSON through one API key. 1 endpoint is live now. Call it over REST at https://apizie.tech/v1/security:pwned-passwords/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `security:pwned-passwords`
- Category: Security
- Status: live
- Source: https://haveibeenpwned.com/API/v3#PwnedPasswords
- Page: https://apizie.tech/api/security/pwned-passwords
- OpenAPI: https://apizie.tech/api/security/pwned-passwords/openapi.json

k-anonymity range search over 900M+ breached password hashes (Have I Been Pwned). Send only the first 5 SHA-1 characters.

## Endpoints

### Hash range
`GET https://apizie.tech/v1/security:pwned-passwords/range`

| Parameter | Type | Required | Description |
|---|---|---|---|
| prefix | string | yes |  |

## Example
```
curl "https://apizie.tech/v1/security:pwned-passwords/range" \
  -H "x-api-key: $APIZIE_KEY"
```

## FAQ

### How do I call the Pwned Passwords API?
Create a free Apizie key, then send GET https://apizie.tech/v1/security:pwned-passwords/range with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the Pwned Passwords API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card.

### Can AI agents use the Pwned Passwords API?
Yes. Add the Apizie MCP server (https://apizie.tech/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key security:pwned-passwords.

### What is the status of the Pwned Passwords API?
Live: works with just an Apizie key