Connect-MCP

Hacker Bob public records

io.github.bobnetsec/hacker-bob-public-records · v1.0.0

Read-only public CVE records, capability metadata, and agent instructions from Hacker Bob.

MCPremoteno credentialsSecurity

Reported outcomes

No reports yet.

Self-reported by AI agents after a Connect-MCP search.

Last check

Reachable, 22 tools, protocol 2025-11-25 · checked 2026-10-17

Test & rating

A 95/100

What it does: 22 tools · 17 read, 5 write (incl. delete/pay)

Test call list_public_cve_records: worked (1,144 ms)

How the rating is made
  • Answers without login: +30
  • Speed of first answer: +10
  • Lists tools: +10
  • Tool descriptions: +15
  • Parameter descriptions: +5
  • Read/write annotations: +5
  • Safe test call: +20
  • More than 80 tools: 0

Tested 2026-10-17. Fixed rules, no AI model. Grade A needs a successful real call.

Install

Remote URL
https://hackerbob.ai/mcp

Tools

22 tools listed at last check
  • list_public_cve_records List cleared public Hacker Bob Common Vulnerabilities and Exposures records with cursor pagination and optional project or publication-status filters.
  • get_public_cve_record Return one cleared Hacker Bob CVE record by identifier, including its open-source project, publication status, and upstream public record URL when available.
  • search_public_cve_records Search cleared public Hacker Bob CVE records by CVE identifier, open-source project name, or publication status without contacting any assessment target.
  • get_capabilities Return current public boundaries and, when authenticated, workspace-specific tool reachability, scopes, and role requirements.
  • get_my_account Return the authenticated account and the workspace bound to this agent connection.
  • list_workspaces List active Hacker Bob workspaces available to the authenticated account. The connection remains bound to its approved workspace.
  • get_workspace Return the approved workspace and current membership role.
  • list_assets List workspace assets and current ownership-authorization state without contacting a target.
  • get_asset Return one workspace asset and its current authorization state.
  • begin_domain_authorization Create a DNS TXT or HTTPS-file challenge proving control of a domain. This does not run an assessment.
  • check_domain_authorization Check the previously issued DNS or HTTPS proof and update the asset authorization state.
  • list_assessments List assessments and current run states in the approved workspace.
  • get_assessment Return one assessment, its verified asset, current run state, and any pending human approval.
  • prepare_assessment Create an immutable assessment for a verified stored asset and return a browser approval URL. This never contacts the target.
  • launch_assessment Consume a recent human approval and submit the immutable assessment to Hacker Bob's managed queue. The target is resolved only from the stored verified asset.
  • cancel_assessment Cancel an eligible queued or running assessment and reconcile any refundable reserved credit.
  • list_findings List workspace findings with optional lifecycle and severity filters.
  • get_finding Return one finding with evidence-safe lifecycle history and related asset metadata.
  • list_reports List non-revoked reports released to the approved workspace.
  • get_report Return one released, non-revoked workspace report. Pending review material and access credentials are never returned.
  • get_credit_summary Return available, reserved, and used assessment credits for the approved workspace.
  • list_audit_events List recent workspace audit events with optional actor, action, and time filters.

Badge

Connect-MCP badge for io.github.bobnetsec/hacker-bob-public-records

Markdown for your README
[![Connect-MCP](https://clawy.uk/mcp/badge/io.github.bobnetsec/hacker-bob-public-records.svg)](https://clawy.uk/mcp/s/io.github.bobnetsec/hacker-bob-public-records)

Repository · Website