Which integrations are available for this server?

Integrates with Bugcrowd to manage bug bounty programs, track scope, list programs, and generate reports. Integrates with HackerOne to manage bug bounty programs, track scope, list programs, and generate reports.

How do I use bug-bounty-hunter?

1. Click on "Deploy Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@bug-bounty-hunter Scan this URL for SQLi and XSS" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

Bug Bounty Hunter MCP Server 🎯⚡

Automated recon → vuln scan → Solidity audit → report → submit. Hunt while you sleep.

Bug bounty automation toolkit exposed as a Model Context Protocol (MCP) server. Hunt Web2 and Web3 vulnerabilities across Immunefi, Code4rena, Cantina, HackerOne, and Bugcrowd.

What It Does

Tool	What It Does
`bounty_recon`	Subdomain enum, tech detection, port scan, screenshots, JS endpoint extraction
`bounty_vuln_scan`	SQLi, XSS, IDOR, SSRF, LFI, open redirect, CORS, JWT weaknesses
`bounty_solidity_scan`	Reentrancy, oracle manipulation, access control, delegatecall, tx.origin, timestamp
`bounty_scope`	Track programs, filter by platform/bounty/web3 focus
`bounty_report`	CVSS-scored reports with PoC and remediation

Related MCP server: Bug Bounty MCP Server

Install

pip install mcp-server-bug-bounty
# OR
git clone https://github.com/manteclaw/mcp-server-bug-bounty.git

Connect

{
  "mcpServers": {
    "bug-bounty": {
      "command": "python",
      "args": ["/path/to/server.py"]
    }
  }
}

Usage Examples

"Recon this target with deep scanning"

"Scan this URL for SQLi and XSS"

"Audit this Solidity contract for reentrancy and access control"

"List all Immunefi programs with $1M+ max bounty"

"Generate a report for these findings on Uniswap program"

Pricing

Tier	Price	Limits
Community	Free	10 calls/day
Hunter	$59/month	Unlimited scans + auto-report
Team	$399/month	Multi-target + Slack alerts

License

MIT

Built by Manteclaw | Immunefi-native hunter | Ship or die

This server cannot be deployed

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Maintenance

ActivityStale

ResponsivenessNo issues

Resources

GitHub Repository

Need Help?

Related Servers

Related MCP Connectors

StrixOAuth
ai.strix
AI pentesting: run scans, triage vulnerabilities, review PRs, manage schedules and assets.
Penetration Testing Version Control
1
oracle42-intelligence
io.github.mintmas
AI-powered threat intelligence, smart contract auditing, and cybersecurity OSINT.
Security Blockchain Penetration Testing
2
ByteRay AI AOAuth
ai.byteray
Hunt zero-days by talking to binaries. 40+ tools. Hosted, OAuth + SSO, invite: hi@byteray.ai
Penetration Testing Code Analysis
2
pentest-mcp-server A
io.github.cyanheads
Offline methodology engine for authorized penetration testing, CTF, and security research.
Penetration Testing Security
721

Related MCP Servers

HexStrike AI MCP Server
Penetration Testing Security Autonomous Agents
b-bogus
F
license
Not graded
quality
D
maintenance
AI-powered cybersecurity automation platform with 150+ security tools and 12+ autonomous AI agents for penetration testing, vulnerability assessment, and bug bounty hunting. Enables comprehensive security testing through intelligent tool selection and automated workflows.
Updated a year ago (2025-09-06 06:22 UTC)
2
-
Bug Bounty MCP Server
Penetration Testing Security App Automation
SlanyCukr
A
license
C
quality
D
maintenance
Enables AI agents to generate and manage specialized bug bounty hunting workflows including reconnaissance, vulnerability testing, OSINT gathering, and file upload testing. Provides REST API endpoints for comprehensive security assessments with intelligence-driven vulnerability prioritization.
Updated a year ago (2025-09-22 10:58 UTC)
40
2
MIT
BugBounty MCP Server
Penetration Testing Security
gokulapap
A
license
Not graded
quality
D
maintenance
Enables comprehensive security testing and penetration testing through natural language conversations with 92+ tools for reconnaissance, vulnerability assessment, web application testing, OSINT, and reporting. Designed for authorized bug bounty hunting and security assessments.
Updated 22 days ago (2026-08-24 11:06 UTC)
43
MIT
VulneraMCP
Penetration Testing Security Testing & QA Tools
telmon95
A
license
B
quality
A
maintenance
AI-powered bug bounty hunting platform that integrates security tools (OWASP ZAP, Caido, Burp Suite) for automated reconnaissance, vulnerability testing, JavaScript analysis, and finding management with PostgreSQL storage.
Updated 2 months ago (2026-07-24 12:26 UTC)
47
43
MIT

Appeared in Searches

A tool for assisting with bug bounty hunting