bug bounty mcp servers

20 tagged bug bounty, measured the same way as everything else here.

Browse within: ctf-tools 5hackerone 5python 5security-tools 5

cybersec-toolkit

01

26zl/cybersec-toolkit

MCP server Claude CodeCodexCursor +2

MCP server "cybersec-toolkit" as configured in 26zl/cybersec-toolkit. Runs in Docker (ghcr.io/26zl/cybersec-toolkit:1.1.1). Needs 2 environment variables to run.

46 4d ago A tokens not measured original MIT

Copenhagen0x/solana-security-standard

MCP server Claude CodeCodexCursor +2

MCP server for the Solana Security Standard (SOL-0XX): scan Solana/Anchor Rust and serve the rules to any MCP client (Cline, Copilot, Cursor, Claude, Windsurf). Runs locally from the @jelleo/solana-security-mcp npm package.

37 13d ago A tokens not measured original MIT

solana-security-mcp

03

Copenhagen0x/solana-security-standard

MCP server Claude CodeCodexCursor +2

Scan Solana/Anchor code against the Solana Security Standard and serve the ruleset to MCP clients. Runs locally from the @jelleo/solana-security-mcp npm package.

37 13d ago A tokens not measured original MIT

burp

04

titaniumtushar/burp-mcp-plus

MCP server Claude CodeCodexCursor +2

MCP server "burp", hosted remotely at 127.0.0.1, as configured in titaniumtushar/burp-mcp-plus.

6 3mo ago A tokens not measured original MIT

burp-plus

05

titaniumtushar/burp-mcp-plus

MCP server Claude CodeCodexCursor +2

MCP server "burp-plus" as configured in titaniumtushar/burp-mcp-plus. Launched with /opt/homebrew/bin/uv run --directory /path/to/burp-mcp-plus burp-mcp-plus. Needs 1 environment variable to run.

6 3mo ago A tokens not measured original MIT

chrome-devtools

06

vigilantshield/Claude-HunterKit

MCP server Claude CodeCodexCursor +2

Lets the agent inspect and automate a live Chrome instance through the DevTools protocol: performance traces, network, console. Runs locally from the chrome-devtools-mcp npm package.

5 1mo ago A tokens not measured

mcp-vanguard

07

skyvanguard/mcp-vanguard

MCP server Claude CodeCodexCursor +2

MCP server "mcp-vanguard" as configured in skyvanguard/mcp-vanguard. Runs locally from the mcp-vanguard npm package.

3 6mo ago A tokens not measured original MIT

ghidra-mcp

08

Shad0wMazt3r/The-Scaffolding

MCP server Claude CodeCodexCursor +2

MCP server "ghidra-mcp", hosted remotely at 127.0.0.1, as configured in Shad0wMazt3r/The-Scaffolding.

2 11d ago A tokens not measured GPL-3.0

github-mcp

09

Shad0wMazt3r/The-Scaffolding

MCP server Claude CodeCodexCursor +2

MCP server "github-mcp" as configured in Shad0wMazt3r/The-Scaffolding. Runs in Docker (ghcr.io/github/github-mcp-server). Needs 1 environment variable to run.

2 11d ago A tokens not measured GPL-3.0

lattice-mind

10

Shad0wMazt3r/The-Scaffolding

MCP server Claude CodeCodexCursor +2

MCP server "lattice-mind", hosted remotely at localhost, as configured in Shad0wMazt3r/The-Scaffolding.

2 11d ago A tokens not measured GPL-3.0

hackerone

11

ASK191225/bugbounty-kit

MCP server Claude CodeCodexCursor +2

MCP server "hackerone" as configured in ASK191225/bugbounty-kit. Runs C:\Users\ask92\Downloads\bugbounty-kit\scripts\hackerone_mcp.py with python. Needs 2 environment variables to run.

2 23d ago A tokens not measured

filesystem

12

ASK191225/bugbounty-kit

MCP server Claude CodeCodexCursor +2

Gives the agent read and write access to a set of allowed directories on the local filesystem. Runs locally from the @modelcontextprotocol/server-filesystem npm package.

2 23d ago A tokens not measured

git

13

ASK191225/bugbounty-kit

MCP server Claude CodeCodexCursor +2

MCP server "git" as configured in ASK191225/bugbounty-kit. Runs locally from the @modelcontextprotocol/server-git npm package. Needs 1 environment variable to run.

2 23d ago A tokens not measured

white-hat-agent

14

kappa9999/white-hat-agent

MCP server Claude CodeCodexCursor

MCP server "white-hat-agent" as configured in kappa9999/white-hat-agent. Runs locally from the white-hat-agent Python package.

0 13d ago A tokens not measured original Apache-2.0

vuln-intel

15

rozetyp/vuln-intel-mcp

MCP server Claude CodeCodexCursor

Hosted CVE + bug-bounty-mechanic MCP: exploitation-first ranking, CVE fact-check, mechanic transfer. Remote server at mcp.rozetyp.com.

0 1mo ago A tokens not measured

offsec

16

nadirzhon/offsec-mcp

MCP server Claude CodeCodexCursor +2

MCP server that gives AI agents authorized-only offensive-security tools: recon, CVE intel, JS analysis, port scanning. Runs locally from the offsec-mcp Python package. Needs 2 environment variables to run.

0 23d ago A tokens not measured original MIT

apex-bounty

17

nadirzhon/apex

MCP server Claude CodeCodexCursor +2

MCP server "apex-bounty" as configured in nadirzhon/apex. Runs locally from the apex-bounty Python package.

0 16d ago A tokens not measured original MIT