Read-only public CVE records, capability metadata, and agent instructions from Hacker Bob.
Connect Remote server
claude mcp add --transport http hacker-bob-public-records https://hackerbob.ai/mcp
{
"mcpServers": {
"hacker-bob-public-records": {
"url": "https://hackerbob.ai/mcp"
}
}
}
{
"servers": {
"hacker-bob-public-records": {
"type": "http",
"url": "https://hackerbob.ai/mcp"
}
}
}
Settings > Connectors > Add custom connector
URL: https://hackerbob.ai/mcp
Tools 22 found in our last check
list_public_cve_recordsList cleared public Hacker Bob Common Vulnerabilities and Exposures records with cursor pagination and optional project or publication-status filters.
get_public_cve_recordReturn one cleared Hacker Bob CVE record by identifier, including its open-source project, publication status, and upstream public record URL when available.
search_public_cve_recordsSearch cleared public Hacker Bob CVE records by CVE identifier, open-source project name, or publication status without contacting any assessment target.
get_capabilitiesReturn current public boundaries and, when authenticated, workspace-specific tool reachability, scopes, and role requirements.
get_my_accountReturn the authenticated account and the workspace bound to this agent connection.
list_workspacesList active Hacker Bob workspaces available to the authenticated account. The connection remains bound to its approved workspace.
get_workspaceReturn the approved workspace and current membership role.
list_assetsList workspace assets and current ownership-authorization state without contacting a target.
get_assetReturn one workspace asset and its current authorization state.
begin_domain_authorizationCreate a DNS TXT or HTTPS-file challenge proving control of a domain. This does not run an assessment.
check_domain_authorizationCheck the previously issued DNS or HTTPS proof and update the asset authorization state.
list_assessmentsList assessments and current run states in the approved workspace.
get_assessmentReturn one assessment, its verified asset, current run state, and any pending human approval.
prepare_assessmentCreate an immutable assessment for a verified stored asset and return a browser approval URL. This never contacts the target.
launch_assessmentConsume a recent human approval and submit the immutable assessment to Hacker Bob's managed queue. The target is resolved only from the stored verified asset.
cancel_assessmentCancel an eligible queued or running assessment and reconcile any refundable reserved credit.
list_findingsList workspace findings with optional lifecycle and severity filters.
get_findingReturn one finding with evidence-safe lifecycle history and related asset metadata.
list_reportsList non-revoked reports released to the approved workspace.
get_reportReturn one released, non-revoked workspace report. Pending review material and access credentials are never returned.
get_credit_summaryReturn available, reserved, and used assessment credits for the approved workspace.
list_audit_eventsList recent workspace audit events with optional actor, action, and time filters.
Details
| Endpoint | https://hackerbob.ai/mcp (Streamable HTTP) |
| First published | 23 Aug 2026 |
| Last updated | 23 Aug 2026 |
| Registry name | io.github.bobnetsec/hacker-bob-public-records |
More security servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
