intigriti-mcp
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| INTIGRITI_API_TOKEN | Yes | Your Intigriti Researcher API token. Generate a Personal Access Token (PAT) from your Intigriti profile. Required for authentication with the API. | |
| INTIGRITI_SKILLS_PATH | No | Path to your skills.json file that defines your strengths for the recommend_program tool. Defaults to ./skills.json. | ./skills.json |
| INTIGRITI_SNAPSHOT_PATH | No | Path to the JSON file used for storing scope snapshots for diffing. Defaults to ./data/scope-snapshots.json. | ./data/scope-snapshots.json |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| list_programsA | List Intigriti bug bounty programs visible to this researcher account, with status and reward info. |
| get_program_scopeA | Fetch the full in-scope/out-of-scope asset list and metadata (headers, rate limits) for a single program. |
| diff_scopeA | Fetch a program's current scope and compare it against the last stored snapshot, returning added/removed/modified assets. Updates the stored snapshot. |
| recommend_programA | Score all active programs against your skills manifest (INTIGRITI_SKILLS_PATH) and return them ranked best-fit first. Programs whose scope was recently published get a decaying recency boost so newly-updated programs surface higher. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 4 tools
The four tools have mostly distinct purposes, though list_programs and recommend_program both return program lists, and get_program_scope and diff_scope both fetch scope. Clear descriptions make the intended difference—overview vs. ranking and display vs. change tracking—usable, but mild confusion risk remains.
All tool names follow a consistent lowercase snake_case verb-first convention: list_programs, get_program_scope, diff_scope, recommend_program. The object follows the verb in each case, making the naming pattern predictable and easy to extend.
Four tools is a well-scoped size for a focused Intigriti program-monitoring server. Each tool addresses a necessary step in the workflow without redundancy or bloat.
For the inferred use case—program discovery, scope inspection, scope change tracking, and skill-based recommendations—the surface is largely complete. Submission/reporting workflows are absent, but they appear outside this server's narrow, deliberate scope.