MCP server connecting Claude to the HackerOne Hacker API — programs, scope, reports, hacktivity, payouts
An MCP server that connects Claude to the HackerOne Hacker API. List your programs, pull structured scope, read and submit reports, browse Hacktivity, and check your balance — all from inside Claude Code.
Tool What it does -------------------- testconnection Verify credentials work (run this first) listprograms List programs you can access getprogram Full details for one program by handle getprogramscope Structured scope (in-scope assets), filter by bounty/submission getprogramweaknesses Accepted weakness (CWE) types getscopeexclusions Out-of-scope categories searchscope Search a keyword across ALL your programs' scopes listmyreports Reports you've submitted getreport One report by ID (activities, bounties, state) submitreport Submit a new vulnerability report hacktivity Query publicly disclosed reports for intel getbalance / getearnings / getpayouts Money hackeroneapi Raw passthrough for any other endpoint
1. Get an API token Go to , create a token, and note both the identifier (username) and the token value.
The server auto-loads .env from this folder — nothing else to configure.
Then in Claude: "list my HackerOne programs" or "pull the scope for program X".
To register only for the current project instead, add --scope project.
Credentials come from .env, or set HACKERONEAPIUSERNAME / HACKERONEAPITOKEN in the env block of the config.
Notes - Base URL: https://api.hackerone.com/v1, HTTP Basic auth. - submitreport creates a real report — review details before calling. - .env is gitignored; never commit your token.
From the project README.
Add the radar badge to your README — it shows your project was picked up by MCP Radar and links to this page:
[](https://mcp.liqiwa.com/s/abdugafforov-bobur--hackerone-mcp.html)
Stop your AI from making things up — it proposes, deterministic tools decide, every claim checked against ground truth with evidence. Grounded facts and context survive resets. Reverse engineering is
zhuyansen/new-term-radarDaily radar for new AI terms: names of new models, products and repos, caught on X, Hugging Face, GitHub and sitemaps before keyword tools list them.
yzg1226/mcd-party-officer🍟 麦当劳门店派对成团调度 Skill — 把派对从「策划」推进到「办得成」：成团概率雷达 / 包场vs拼团 / 择日黄历 / 儿童营养指数 / 招募卡与邀请函
fellowgeek/mcp-memoryAn OKF-backed Model Context Protocol (MCP) server delivering persistent long-term memory and SQLite FTS5 search for AI agents.
hirotomasato/yowesGenerate realistic teacher documents (ID cards, licenses, letters) for 13 countries via MCP.
hujjun/mcd-saver-strategist麦当劳省钱点餐助手（麦门精算师）｜麦当劳优惠券组合优化 Skill：拉取麦当劳菜单与全部可用优惠券，算出最省的点餐组合，巨无霸套餐 ¥47 → ¥21.9（省 53%）。McDonalds MCP（麦当劳 MCP）coupon optimizer · McDonalds China MCP Server · Agent Skill for WorkBuddy · 麦当劳程序员创意开发大赛参赛作品
The top new MCP servers of the week, every Monday. No spam, unsubscribe anytime.