NestDaddy

Hacker Bob public records

io.github.bobnetsec/hacker-bob-public-records ยท v1.0.0

Read-only public CVE records, capability metadata, and agent instructions from Hacker Bob.

Connect Remote server

Terminal
claude mcp add --transport http hacker-bob-public-records https://hackerbob.ai/mcp
~/.cursor/mcp.json
{
  "mcpServers": {
    "hacker-bob-public-records": {
      "url": "https://hackerbob.ai/mcp"
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "hacker-bob-public-records": {
      "type": "http",
      "url": "https://hackerbob.ai/mcp"
    }
  }
}
Claude Desktop
Settings > Connectors > Add custom connector
URL: https://hackerbob.ai/mcp

Tools 22 found in our last check

  • list_public_cve_records

    List cleared public Hacker Bob Common Vulnerabilities and Exposures records with cursor pagination and optional project or publication-status filters.

  • get_public_cve_record

    Return one cleared Hacker Bob CVE record by identifier, including its open-source project, publication status, and upstream public record URL when available.

  • search_public_cve_records

    Search cleared public Hacker Bob CVE records by CVE identifier, open-source project name, or publication status without contacting any assessment target.

  • get_capabilities

    Return current public boundaries and, when authenticated, workspace-specific tool reachability, scopes, and role requirements.

  • get_my_account

    Return the authenticated account and the workspace bound to this agent connection.

  • list_workspaces

    List active Hacker Bob workspaces available to the authenticated account. The connection remains bound to its approved workspace.

  • get_workspace

    Return the approved workspace and current membership role.

  • list_assets

    List workspace assets and current ownership-authorization state without contacting a target.

  • get_asset

    Return one workspace asset and its current authorization state.

  • begin_domain_authorization

    Create a DNS TXT or HTTPS-file challenge proving control of a domain. This does not run an assessment.

  • check_domain_authorization

    Check the previously issued DNS or HTTPS proof and update the asset authorization state.

  • list_assessments

    List assessments and current run states in the approved workspace.

  • get_assessment

    Return one assessment, its verified asset, current run state, and any pending human approval.

  • prepare_assessment

    Create an immutable assessment for a verified stored asset and return a browser approval URL. This never contacts the target.

  • launch_assessment

    Consume a recent human approval and submit the immutable assessment to Hacker Bob's managed queue. The target is resolved only from the stored verified asset.

  • cancel_assessment

    Cancel an eligible queued or running assessment and reconcile any refundable reserved credit.

  • list_findings

    List workspace findings with optional lifecycle and severity filters.

  • get_finding

    Return one finding with evidence-safe lifecycle history and related asset metadata.

  • list_reports

    List non-revoked reports released to the approved workspace.

  • get_report

    Return one released, non-revoked workspace report. Pending review material and access credentials are never returned.

  • get_credit_summary

    Return available, reserved, and used assessment credits for the approved workspace.

  • list_audit_events

    List recent workspace audit events with optional actor, action, and time filters.

Details

Endpointhttps://hackerbob.ai/mcp (Streamable HTTP)
First published23 Aug 2026
Last updated23 Aug 2026
Registry nameio.github.bobnetsec/hacker-bob-public-records

More security servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.