Skip to main content
Glama
501,081 tools. Updated 2026-08-31 21:42

"A tool for assisting with bug bounty hunting" matching MCP tools:

  • MARKET SIZE for outdoor recreation activities in US dollars, by activity and state — BEA's Outdoor Recreation Satellite Account (official government statistics, not analyst estimates). Use for "how big is the hunting industry", "fishing economy by state", "which states have the largest outdoor recreation economy", "value of the skiing industry". Activities include hunting, shooting, fishing, boating, hiking/camping, equestrian, skiing/snow, bicycling, RVing, motorcycling/ATV, golf/tennis, guided tours, and the overall total. Returns value added (the activity's contribution to GDP) per state for a year, ranked. IMPORTANT: birdwatching and wildlife WATCHING are not separate lines in this account — hunting and fishing are the only wildlife-related activities measured, so do not use this to size birding specifically. This tool wraps BEA table SAOACTVA so you do not have to know BEA table or line codes; for other BEA data use get_data.
    Connector
  • Claim a bounty through POST /v1/claims with bounty, agent_kid, and agent_token. On success, the response includes claim_id, claim_ref, fuse_expires_at, fuse_minutes, and current state; deliver before the fuse expires or the claim can be released. fuse_minutes is the platform fuse after applying worker standing and any poster claimWindowMinutes floor from the bounty. Common blockers include unauthorized, claim_unavailable, active_claim_exists, claim_limit_reached, rate_limited, payout_required, email_unverified, and github_signal_required. Call frantic.get_agent_status first when blocked. $0 goodwill requires a registered agent token. Paid bounties up to $10 require verified contact identity; paid bounties over $10 require a GitHub account at least 90 days old with visible public activity or one successful paid bounty.
    Connector
  • Submit a trading-edge idea to the governed edge-idea bounty. You are paid a FLAT sats bounty for the IDEA if it survives the same backtest gate (Monte-Carlo permutation p-value + Deflated Sharpe) our own important decisions are held to — no capital is pooled, you keep your funds, we buy the idea. Tiers auto-detected from `spec`: parameter (a search grid on an existing strategy family), code (a novel signal function — run only in a hardened, network-off Docker sandbox), or concept (a free-text idea). A code-tier signal_code must define generate_signals(candles).
    Connector
  • Report unexpected tool errors or confusing Conduit outcomes for AX review (agent_report_issue — not order_feedback). Pass message (required), optional kind=bug|confusing|wrong_data|blocked, plus agent_id, tool, error, detail, search_id, order_id, session_id, and/or context. Dedupes open reports with the same tool+error+correlation. Does not change reputation.
    Connector
  • Get aggregate statistics about missions on the HomeVisto platform. Returns total counts, status breakdown, and average bounty information. Useful for understanding platform activity.
    Connector
  • List the active Customer Bounty offers: the qualifying Coverage Uplift products and the fixed reward you earn for referring a NEW customer who buys and completes one. Requires a TaskBounty API key. Only available once the program is live.
    Connector

Matching MCP Servers

  • F
    license
    Not graded
    quality
    D
    maintenance
    A comprehensive MCP server for automated bug bounty hunting and security reconnaissance, featuring over 28 specialized tools for subdomain discovery, vulnerability scanning, and traffic analysis. It integrates automated scope validation and professional reporting across multiple platforms like HackerOne and Bugcrowd to streamline security testing.
    5

Matching MCP Connectors

  • AI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates.

  • Agent-to-agent bounty board: post tasks with stated rewards, fill them, first accepted wins.

  • Fund a paid review bounty on one of YOUR projects, paying reviewers from your wallet credit. `amount` is US dollars per review (funds one review slot). Only the project owner can fund a bounty. This never charges a card — if your credit is short it returns a top-up URL so you can load credit first.
    Connector
  • Real, currently-open, funded tasks on 01Mind's own Venue -- work you can apply for directly, free to call, no payment required. Some tasks pay a real USDC bounty on approval; others (live-research tasks) have no bounty but reward participation with a free copy of the finished report, and are open only to agents with a verified-live entry in 01Mind's Agent Verification Registry. To apply, sign the real EIP-191 challenge and POST to /venue/tasks/{id}/apply -- see GET /openapi.json for the exact request shape.
    Connector
  • Check whether a name is available to register across MULTIPLE TLDs at once — the domain-hunting tool. Pass a base name ("acme") and get .com/.io/.ai/.co/.net/.org/.app/.dev checked in one call (or pass your own tlds list). For each: available true/false (+ expiration if taken). Use for "is X available", "find an open domain for my project", "which TLDs is X free on". Single-domain detail is domain_status; this is the bulk/brainstorm version.
    Connector
  • Browse open human-only tasks (work AI agents need real humans for), filterable by location. Public. Fulfill one by submitting a bounty offer whose payload is your proof-of-completion (hidden until the poster accepts; accept pays you).
    Connector
  • Return a curated snapshot of currently-live audit competitions and bug-bounty programs across Code4rena, Cantina, Sherlock, and direct-protocol channels. Useful for solo wardens triaging which contests to enter. Snapshot updates with each cipher-x402-mcp release; treat the data as a hint, always cross-check the platform before submitting. Free, no payment required.
    Connector
  • Read-only: the public bounty board: real support tickets with cash bounties any agent can earn, richest first. Two kinds of work. PLAIN BOUNTIES: no entry fee; call draft_reply or propose_resolution on the ticketId at the tool's normal price, and if a human approves your draft you receive the agent share of the bounty in USDC. CONTESTS: same, plus a per-attempt entry fee and a capped number of entrants. Unlike the other tools this is NOT limited to your own workspace: it lists the same public board shown on the arena page. Each row gives the ticketId to act on and the bounty in USD. Returns nothing that is not already public, and never creates or modifies anything. [free]
    Connector
  • Find open-source bounties that are actually likely to pay out. Bounty boards are polluted with listings that will never settle (observed live: a $1,262,178 bounty sitting on a near-empty repository). This scores each listing 0-100 on credibility using repository stars, project age, amount plausibility and payment-bot presence, then returns the top results sorted by that score. Use when looking for paid open-source work worth attempting. Operated by an autonomous AI agent (Krab Bot); the free preview tier is used here.
    Connector
  • Freshly listed/profiled tokens on Base — Returns the latest tokens profiled on Base from the DexScreener feed — address, description, and links. Great for discovery bots hunting new launches early. Priced $0.01 per call over x402 on Base; send a prepaid x-credit-token header for unlimited calls, or get 1 free call/day per tool. No wallet or API key required.
    Connector
  • Create a new bounty as an unfunded DRAFT. Returns task_id and slug. Bounty is created as DRAFT/UNFUNDED. Call fund_bounty next to get a Stripe Checkout URL the user can open to fund. Requires a TaskBounty API key.
    Connector
  • Create a Stripe Checkout session for funding a draft bounty. Returns a Stripe Checkout URL the user must open in a browser to complete payment. This tool does NOT charge the user automatically - payment requires the user to visit the URL and confirm. Requires a TaskBounty API key.
    Connector
  • Fetch the full record for a specific Archimedes Market bounty. Returns everything search_bounties returns PLUS the full description, all requirements with category + priority, all deliverables with accepted file formats, and acceptance tests. Use this after search_bounties when the user (or agent) wants to evaluate fit, plan a submission, or quote a timeline.
    Connector
  • Scan a company for product-system bugs and unlocks (failed/timed-out activity runs, blocked_on_you cards, open error agent_feedback) and return ranked product-request candidates for the FreedomOS product team. Use when the product team is hunting class bugs/unlocks across a portfolio tenant (dry-run by default; set file_top_n to file up to 5 bug cards). Does NOT invent feature fantasy — bias is bugs/unlocks only. For FreedomOS product-inbox members only. [write-tier — first use may require a manager's approval; a from-now-on approval makes future calls seamless, a just-once approval re-asks next time.]
    Connector
  • Search App Store and Google Play apps across 25+ filters — store, category, language (including not_languages, a localization-gap filter that finds apps NOT localized in a given language), price model, rating, review count, download and revenue estimates (min and max), release and update recency, and review-growth direction — sorted by any column. The tool behind niche sizing, competitor shortlists, and localization-gap hunting. Cost: 1 credit.
    Connector