{
  "id": 13942897,
  "title": "My AI assistant kept guessing about data breaches. So I gave it one free URL (MCP, no API key)",
  "url": "https://urgent.news/2026/10/12/my-ai-assistant-kept-guessing-about-data-breaches-so-i-gave-it-one",
  "topic": "ai",
  "section": "AI",
  "published": "2026-10-12T11:31:39.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/devaonbreaches/my-ai-assistant-kept-guessing-about-data-breaches-so-i-gave-it-one-free-url-mcp-no-api-key-c0d"
  },
  "original_language": "en",
  "account": "When asking an AI assistant if your email has been in a data breach, you receive a confident answer, but it's just a guess. The AI model cannot look anything up, so it relies on old training data to fill the gap. However, a guess is not a reliable answer when it comes to your own account. To address this issue, the author created XposedOrNot, a free and open-source breach index.\n\nThe author initially copied API results into chat windows by hand, but this felt tedious. So, they added an MCP (Multi-Modal Communication Protocol) endpoint to the API. MCP is a standard way to give an AI assistant tools it can call. By pointing the AI at a server, it determines when to use what tool.\n\nSetting up the MCP was simple, taking about two minutes. The author provided instructions for various platforms, such as using Claude Code, Cursor, and VS Code. Once the setup was complete, the AI could read the tool list and pick one to answer questions like \"has my email been in any breaches, and what was leaked?\" The assistant can use six different tools, each serving a specific purpose related to checking email breaches, analyzing breach data, and managing the breach index.\n\nThrough this process, the author learned several important lessons. First, keep the system stateless, as each request should stand on its own. Second, inform the client that the tools are read-only and idempotent, minimizing the need for permission requests. Third, provide clear error messages for the model, allowing it to fix any issues and try again. Lastly, limit the free version of the service, encouraging users to upgrade to a paid plan if they need more functionality.",
  "summary": "Ask an AI assistant if your email has been in a data breach. You'll get a neat, confident answer. And it's a guess. It's not really the model's fault. It can't look anything up, so it fills the gap from old training data. But a guess is a bad answer when the question is about your own account. I run XposedOrNot, a free and open-source breach index. I kept copying API results into chat windows by…",
  "key_points": [
    "AI assistant guesses about data breaches without verifying facts",
    "Author created XposedOrNot, free breach index to provide reliable answers",
    "MCP endpoint enables AI to call tools for checking email breaches"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}