Search and list your HackerOne reports. Filter by keyword, program, severity, or state. Great for finding past reports to reference when drafting new ones.

Get the full details of a specific HackerOne report by ID. Returns title, vulnerability details, impact, severity, full CVSS vector/score, bounty amounts, attachments, timestamps, and program info.

Get a report with its full triage conversation. Useful for understanding what questions triage asked, how you responded, and what led to resolution. Great for learning what works.

Get the activity timeline of a report: comments, state changes, bounty awards, and triage responses.

Submit a new vulnerability report to a HackerOne program. Returns the new report ID and URL. Use get_program_scope and get_program_weaknesses first to get the right scope/weakness IDs.

Add a comment to an existing HackerOne report. Use this to respond to triage questions or provide additional information.

Withdraw/close one of your own HackerOne reports. Sends a close request with an optional message.

Search publicly disclosed HackerOne reports (hacktivity). Useful for learning what gets paid, finding prior art, and understanding what a program considers valid.

Generate a structured Markdown template for drafting a vulnerability report. Helps format Summary, Steps to Reproduce, Impact, and Remediation.

Discover and filter the best active bug bounty programs matching your criteria: bounty offers, fast payments, open submission, open scope, or keywords.

List bug bounty programs you have access to on HackerOne. Auto-paginates to return all programs.

Get detailed info about a single program: policy, response times, metrics, bounty splitting, and submission state.

Get the in-scope assets for a bug bounty program. Auto-paginates to return all scope items. Returns asset types, identifiers, bounty eligibility, and severity caps.

Get report categories that are specifically excluded from rewards for a program.

Get the accepted vulnerability/weakness types for a program. Auto-paginates. Helps frame reports using the right CWE categories the program cares about.

Get your HackerOne hacker profile: reputation, signal, impact, rank, and account info.

Get your bounty earnings history. Shows amounts, currency, dates, and which programs paid out.

Get your payout history showing completed payout transactions, payment providers (e.g. PayPal, Wire), status, and dates.

Get your current unpaid bounty balance on HackerOne.

Fetch your recent reports and analyze patterns: most common vulnerability types, severity distribution, resolution rates, and programs. Useful for understanding your hunting profile.

List all draft report intents and AI assistant processing job statuses.

Get details of a specific draft report intent by ID.

Create a new draft report intent before submitting as a report.

Update title or description of a draft report intent.

Delete a draft report intent.

Finalize and submit a draft report intent as an official vulnerability report.

List all attachments associated with a draft report intent.

Delete an attachment from a draft report intent.