A
licenseB
qualityD
maintenanceEnables MCP clients like Claude and Codex to interact with HackerOne's API to list and get reports, programs, and scopes.
21
18 npm
3
MIT
Best HackerOne MCP Servers
HackerOne is the leading hacker-powered security platform, helping organizations find and fix critical vulnerabilities before they can be criminally exploited.
Why this server?
Provides tools for interacting with HackerOne's API, enabling users to list and retrieve reports, list programs, and get program scopes and details.
Why this server?
Provides read-only access to the authenticated hacker's HackerOne account, allowing an agent to read programs, policies, scope, reports, and payments through the HackerOne Hacker API. It cannot create, update, or submit reports.
AlicenseAqualityCmaintenanceA read-only MCP server that lets an agent browse the HackerOne Hacker API using an authenticated hacker account, exposing programs, policies, scope, reports, and payments. It cannot create, update, or submit reports.15MITWhy this server?
Read-only integration with the HackerOne Hacker API. Provides tools to list and inspect bug bounty programs (policy, metadata), retrieve structured scopes and scope exclusions, check whether a host/URL/IP/CIDR is in scope (with wildcard, domain, URL, IP and CIDR matching plus exclusions as caveats), search disclosed reports via Lucene queries or per program for deduplication and prior art, and list the user's own submitted reports with state, severity and bounty.
Why this server?
Allows browsing HackerOne bug bounty programs, reading policies, fetching structured scope (domains, CIDRs, mobile packages, etc.), and checking whether a target asset matches an active program scope via the HackerOne Hacker API v1.
AlicenseAqualityBmaintenanceEnables AI assistants and agents to search bug bounty programs, retrieve policies and scopes, and check targets against active scope across HackerOne, YesWeHack, and Intigriti using personal API credentials.5MITWhy this server?
Provides read-only tools to interact with a HackerOne researcher account, including listing programs, scopes, reports, earnings, searching disclosed reports, and drafting bug reports.
FlicenseAqualityDmaintenanceA local, read-only MCP server that connects your HackerOne researcher account to Claude Desktop and Claude Code, helping you find targets, analyze program scopes, review reports and earnings, and draft bug reports.174-Why this server?
Provides read-only tools for interacting with HackerOne, including searching and retrieving reports, managing programs and scope, accessing earnings and payouts, viewing disclosed reports, and performing owner-only operations like balance, bounty table, audit log, and program members.
FlicenseBqualityCmaintenanceEnables read-only interaction with HackerOne, providing tools for searching and analyzing reports, exploring programs and scope, accessing earnings, and retrieving public disclosures.25-Why this server?
Provides tools for interacting with the HackerOne API to manage vulnerability reports, bug bounty programs, and earnings, including capabilities to submit findings, respond to triage, and analyze hunting patterns.
FlicenseAqualityDmaintenanceProvides read-only access to HackerOne reports, program scopes, and bounty earnings through the HackerOne API. It enables users to analyze hunting patterns, check asset eligibility, and retrieve report details or triage conversations via natural language.940-Why this server?
Provides bug bounty report templates and integrates with HackerOne for structured vulnerability reporting.
AlicenseNot gradedqualityAmaintenanceAI-agent-optimized CVE exploit discovery toolkit that provides 19 tools for finding proof-of-concept exploits, CTF labs, bug bounty reports, and vulnerability intelligence from a single interface.110 PyPI6MITWhy this server?
Supports security testing and reconnaissance for bug bounty programs, including subdomain enumeration, vulnerability scanning, and report generation for authorized assessments.
AlicenseNot gradedqualityDmaintenanceProfessional security testing server with 50+ integrated tools for web application vulnerability scanning, reconnaissance, fuzzing, and API testing. Enables comprehensive bug bounty hunting workflows including subdomain enumeration, XSS/SQLi detection, and automated security assessments.1MIT