Skip to main content
Glama
R-s0n

Bug Bounty MCP Server

by R-s0n

get_bounty_reports

Retrieve real-world bug bounty reports by type: accepted for methodology and impact examples, rejected to learn what not to submit. Filter by vulnerability class.

Instructions

Get real-world bug bounty reports, both accepted and rejected. Use accepted reports for methodology and impact examples. Use rejected reports to understand what NOT to submit.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
typeYesWhether to get accepted (valid) or rejected (invalid/informational) reports
vulnerability_classNoOptional: filter by vulnerability class, e.g., 'xss', 'ssrf', 'idor'
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries full burden. It only mentions 'Get' implying a read operation, but lacks details on return format, pagination, authentication, or side effects. For a read tool, basic behavioral traits are missing.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely concise with three short sentences, front-loading the main action and immediately providing usage context. No unnecessary words or redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple two-parameter tool with no output schema, the description covers the core functionality and offers clear usage scenarios. It lacks details on return type, but the name and context make it adequate.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description does not add extra meaning beyond the schema's field descriptions; it merely restates the purpose of the two types without enriching parameter semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool retrieves real-world bug bounty reports, distinguishing between accepted and rejected types. The verb 'Get' is specific to the resource, and the context differentiates it from sibling tools like assess_report_quality or get_payloads.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly guides when to use each type: accepted for methodology examples, rejected for understanding what not to submit. However, it does not mention when to avoid the tool or consider alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Install Server

Other Tools

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/R-s0n/rs0n-bug-bounty-mcp-server'

If you have feedback or need assistance with the MCP directory API, please join our Discord server