Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| BUGCROWD_API_PASSWORD | Yes | Your Bugcrowd API password for authentication | |
| BUGCROWD_API_USERNAME | Yes | Your Bugcrowd API username for authentication |
Schema
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| get_organizations | List all organizations accessible to the authenticated user. |
| get_organization | Get detailed information about a specific organization by ID. |
| get_programs | List all bug bounty programs available to the authenticated user. |
| get_program | Get detailed information about a specific bug bounty program. |
| get_submissions | List all bug submissions/vulnerability reports accessible to the user. |
| get_submission | Get detailed information about a specific vulnerability submission. |
| create_submission | Create a new bug submission/vulnerability report. |
| update_submission | Update an existing vulnerability submission. |
| get_reports | List all reports (alternative endpoint to submissions with different data structure). |
| get_report | Get detailed information about a specific report. |
| get_customer_assets | List all customer assets that are in scope for security testing. |
| get_customer_asset | Get detailed information about a specific customer asset. |
| get_monetary_rewards | List all monetary rewards for bug bounty submissions. |
| get_monetary_reward | Get detailed information about a specific monetary reward. |
| get_users | List all users in the organization or program scope. |
| get_user | Get detailed information about a specific user. |
| help | Get detailed help and documentation for Bugcrowd MCP tools. |
| server_health | Check the health status of the MCP server and API connectivity. |