Authenticate with YesWeHack and store the session token locally. Call this first before using any other tool, or when a tool reports that authentication is required.

Option 1 — Direct token: provide access_token to skip credential login entirely. Option 2 — API login: provide email + password for a fast, browser-free login. If your account has 2FA enabled, the first call will ask for a TOTP code; call again with the same email/password and add the totp argument. Option 3 — Browser: call with no arguments to open a browser window instead.

You can also set the YWH_TOKEN environment variable to avoid calling this tool at all; it takes precedence over stored credentials.

Args: access_token: A pre-obtained YesWeHack JWT/bearer token (highest priority). email: Your YesWeHack account email. password: Your YesWeHack account password. totp: 6-digit TOTP code (only needed when 2FA is enabled).

Return the profile of the currently authenticated YesWeHack user.

List bug bounty programs you have access to, including private invite-only programs.

Args: all_pages: If True (default), fetch all pages and return the complete list. page: Specific page to fetch when all_pages is False. private_only: If True, return only private (invite-only) programs.

Get full details for a specific program, including scope, reward ranges, guidelines, requirements, out-of-scope rules, and disabled vulnerability types.

Args: slug: The program slug/identifier (e.g. 'acme-corp'). Use list_programs to find slugs.

List vulnerability reports submitted to a program.

Args: program_slug: The program slug identifier. status: Optional status filter (e.g. 'accepted', 'informative', 'duplicate', 'wont_fix', 'new', 'triaged', 'not_applicable').

Get full details of a specific vulnerability report.

Args: report_id: The numeric report ID (from list_reports output).

List comments/messages for a vulnerability report when your token has access.

Args: report_id: The numeric report ID. raw: Return raw JSON instead of a readable summary.

List your YesWeHack email aliases.

YesWeHack requires KYC verification for alias usage. The exact UI endpoint is not publicly documented, so this tool tries the known API shapes and reports the attempted endpoints if none work.

Args: raw: Return raw JSON instead of a readable summary.

Get credential pools and any assigned credentials for a specific program.

Some programs expose credential pools only after you are invited/accepted and KYC-verified. If credentials require a request first, use request_program_credentials with the pool id shown by this tool.

Args: program_slug: Program slug/identifier. include_secrets: Include passwords/secrets when the API returns them. raw: Return raw JSON instead of a readable summary.

Request credentials from a program credential pool.

This performs a state-changing YesWeHack action. Use get_program_credentials first to find an available pool id. Some email-credential pools require an email address; pass either a YesWeHack alias or another allowed address.

Args: program_slug: Program slug/identifier. pool_id: Optional credential pool id. If omitted, the generic program credential request endpoint is attempted. email: Optional email address for email-based credential pools. raw: Return raw JSON instead of a readable summary.

Read an authenticated YesWeHack API endpoint that is not wrapped yet.

This is a read-only escape hatch for API coverage gaps. Path must be a relative API path such as /programs/example or /reports/123.

Args: path: Relative API path beginning with /. params_json: Optional JSON object of query parameters.

Get the public YesWeHack hacktivity feed (publicly disclosed reports). No authentication required.

Args: page: Page number (default 1).