bug-bounty MCP servers

19 tagged bug-bounty, measured the same way as everything else here.

Browse within: hackerone 7ctf-tools 5security-tools 5

bounty-platforms

01

H-mmer/pentest-agents

MCP server Claude CodeCodexCursor +2

One of 2 in .mcp.json

Model Context Protocol SDK. Runs locally from the mcp Python package.

not rated 1.0k +17 4mo ago A tokens not measured

burp-plus

02

titaniumtushar/burp-mcp-plus

MCP server Claude CodeCodexCursor +2

One of 2 in claude_desktop_config.json

MCP server "burp-plus" as configured in titaniumtushar/burp-mcp-plus. Launched with /opt/homebrew/bin/uv run --directory /path/to/burp-mcp-plus burp-mcp-plus. Needs 1 environment variable to run.

not rated 7 5mo ago A tokens not measured original MIT

chrome-devtools

03

vigilantshield/Claude-HunterKit

MCP server Claude CodeCodexCursor +2

Lets the agent inspect and automate a live Chrome instance through the DevTools protocol: performance traces, network, console. Runs locally from the chrome-devtools-mcp npm package.

not rated 6 2mo ago A tokens not measured

hackerone

04

ASK191225/bugbounty-kit

MCP server Claude CodeCodexCursor +2

One of 5 in .mcp.json

MCP server "hackerone" as configured in ASK191225/bugbounty-kit. Runs C:\Users\ask92\Downloads\bugbounty-kit\scripts\hackerone_mcp.py with python. Needs 2 environment variables to run.

not rated 4 2mo ago A tokens not measured

mcp-vanguard

05

skyvanguard/mcp-vanguard

MCP server Claude CodeCodexCursor +2

MCP server "mcp-vanguard" as configured in skyvanguard/mcp-vanguard. Runs locally from the mcp-vanguard npm package.

not rated 3 7mo ago A tokens not measured original MIT

github-mcp

06

Shad0wMazt3r/The-Scaffolding

MCP server Claude CodeCodexCursor +2

One of 4 in .mcp.json

MCP server "github-mcp" as configured in Shad0wMazt3r/The-Scaffolding. Runs in Docker (ghcr.io/github/github-mcp-server). Needs 1 environment variable to run.

not rated 3 1mo ago A tokens not measured GPL-3.0

white-hat-agent

07

kappa9999/white-hat-agent

MCP server Claude CodeCodexCursor +2

MCP server "white-hat-agent" as configured in kappa9999/white-hat-agent. Runs locally from the white-hat-agent Python package.

not rated 0 yesterday A tokens not measured original Apache-2.0

vuln-intel

08

rozetyp/vuln-intel-mcp

MCP server Claude CodeCodexCursor +2

Hosted CVE + bug-bounty-mechanic MCP: exploitation-first ranking, CVE fact-check, mechanic transfer. Remote server at mcp.rozetyp.com.

not rated 0 6d ago A tokens not measured

offsec

09

nadirzhon/offsec-mcp

MCP server Claude CodeCodexCursor +2

MCP server that gives AI agents authorized-only offensive-security tools: recon, CVE intel, JS analysis, port scanning. Runs locally from the offsec-mcp Python package. Needs 2 environment variables to run.

not rated 0 2mo ago A tokens not measured original MIT

apex-bounty

10

nadirzhon/apex

MCP server Claude CodeCodexCursor +2

MCP server "apex-bounty" as configured in nadirzhon/apex. Runs locally from the apex-bounty Python package.

not rated 0 10d ago A tokens not measured original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: