Decepticon
Provides tools for automated bug bounty hunting on HackerOne, including report generation with CVSS/CWE and auto-submission via REST API.
This server does not currently have a deployable release on Glama. Follow the repository's setup instructions to install and configure it for your MCP client, including any required credentials and local dependencies.
Decepticon v3.1 — Autonomous Bug Bounty Hunt Bundle
One command, full pipeline. Skill methodology + MCP server + H1 auto-submit + profit tracking. Works with OpenCode, Claude Desktop, and any MCP-compatible AI agent.
Quick Install
npx decepticon # Interactive setup wizardor via npm:
npm install -g decepticon
decepticon setupRelated MCP server: BugBounty MCP Server
What You Get
Component | Purpose |
Skill | Complete H1 bug bounty methodology — 3-wave pipeline, reasoning engine, 20+ exploitation playbooks |
MCP Server | Real-time state coordination, credential vault, session management, payload generation |
H1 Auto-Submit | Generate H1-ready reports with CVSS/CWE → auto-submit via REST API |
Profit Tracking | Bounty ledger with 75%/15%/10% split — every dollar tracked |
Dashboard | Live web dashboard at http://127.0.0.1:9999 |
Setup Wizard | Interactive CLI that configures everything in 3 prompts |
Usage
# Setup (first time)
npx decepticon setup
# Start a hunt
opencode hunter
# Then type: HACK https://hackerone.com/program-handle
# View earnings
npx decepticon status
# Launch dashboard
npx decepticon dashboardProfit Split
75% — You (the hunter)
15% — Decepticon platform
10% — Referral partner
All tracked automatically in ~/.opencode/decepticon-state/bounty_ledger.json.
Requirements
Python 3.7+ (for MCP server)
OpenCode or Claude Desktop
Python 3.11+ recommended
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
Related MCP Connectors
Control plane for autonomous software labor. Agents claim objectives over MCP with audit trail.
Hyperion — MCP tool marketplace for AI agents: web, OSINT, security, research via one key.
Human-agent interface for projects: you prioritize and decide, your AI agents execute. Over MCP.
Task manager for AI agents. Orchestrate agents to achieve large goals in unified control plane.
Related MCP Servers
- FlicenseNot gradedqualityDmaintenanceA comprehensive MCP server for automated bug bounty hunting and security reconnaissance, featuring over 28 specialized tools for subdomain discovery, vulnerability scanning, and traffic analysis. It integrates automated scope validation and professional reporting across multiple platforms like HackerOne and Bugcrowd to streamline security testing.5-
- AlicenseNot gradedqualityDmaintenanceEnables automated bug bounty hunting and security research with tools for reconnaissance, web vulnerability scanning, API testing, binary analysis, and mobile app analysis through an MCP interface.MIT
- AlicenseBqualityBmaintenanceEnables AI agents to conduct authorized pentests and bug-bounty workflows with scope enforcement, audit logging, reconnaissance, safe vulnerability checks, payload/wordlist generation, and professional report generation.14MIT
- AlicenseNot gradedqualityAmaintenanceEnables AI clients to drive professional penetration-testing workflows—subdomain enumeration, host probing, content fuzzing, vulnerability scanning, brute-force, traffic capture, and exploitation sweeps—through a single MCP interface with stdio, Streamable HTTP, and legacy SSE transports plus bearer/OIDC auth. It also records engagement artifacts and generates client-ready reports with scope handling, cutting manual pentest administration.165 npmGPL 3.0