Read-only public CVE records, capability metadata, and agent instructions from Hacker Bob.
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
Create a DNS TXT or HTTPS-file challenge proving control of a domain. This does not run an assessment.
Domain name only; no scheme, path, port, credentials, or wildcard.
Workspace slug selected during agent authorization.
This tool isn't marked read-only, so it may change something on the server or in an account you connected.
Create a DNS TXT or HTTPS-file challenge proving control of a domain. This does not run an assessment.
| Argument | Type | Description |
|---|---|---|
| label | string | |
| domain* | string | Domain name only; no scheme, path, port, credentials, or wildcard. |
| method* | string | |
| workspaceSlug* | string | Workspace slug selected during agent authorization. |
| idempotencyKey* | string |
{
"type": "object",
"required": [
"workspaceSlug",
"domain",
"method",
"idempotencyKey"
],
"properties": {
"label": {
"type": "string",
"maxLength": 120,
"minLength": 1
},
"domain": {
"type": "string",
"maxLength": 253,
"minLength": 1,
"description": "Domain name only; no scheme, path, port, credentials, or wildcard."
},
"method": {
"enum": [
"dns_txt",
"http_file"
],
"type": "string"
},
"workspaceSlug": {
"type": "string",
"pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
"maxLength": 80,
"minLength": 1,
"description": "Workspace slug selected during agent authorization."
},
"idempotencyKey": {
"type": "string",
"maxLength": 128,
"minLength": 8
}
},
"additionalProperties": false
}Cancel an eligible queued or running assessment and reconcile any refundable reserved credit.
| Argument | Type | Description |
|---|---|---|
| assessmentId* | string | |
| workspaceSlug* | string | Workspace slug selected during agent authorization. |
| idempotencyKey* | string |
{
"type": "object",
"required": [
"workspaceSlug",
"assessmentId",
"idempotencyKey"
],
"properties": {
"assessmentId": {
"type": "string",
"maxLength": 128,
"minLength": 1
},
"workspaceSlug": {
"type": "string",
"pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
"maxLength": 80,
"minLength": 1,
"description": "Workspace slug selected during agent authorization."
},
"idempotencyKey": {
"type": "string",
"maxLength": 128,
"minLength": 8
}
},
"additionalProperties": false
}Check the previously issued DNS or HTTPS proof and update the asset authorization state.
| Argument | Type | Description |
|---|---|---|
| workspaceSlug* | string | Workspace slug selected during agent authorization. |
| idempotencyKey* | string | |
| authorizationId* | string |
{
"type": "object",
"required": [
"workspaceSlug",
"authorizationId",
"idempotencyKey"
],
"properties": {
"workspaceSlug": {
"type": "string",
"pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
"maxLength": 80,
"minLength": 1,
"description": "Workspace slug selected during agent authorization."
},
"idempotencyKey": {
"type": "string",
"maxLength": 128,
"minLength": 8
},
"authorizationId": {
"type": "string",
"maxLength": 128,
"minLength": 1
}
},
"additionalProperties": false
}Return one assessment, its verified asset, current run state, and any pending human approval.
| Argument | Type | Description |
|---|---|---|
| assessmentId* | string | |
| workspaceSlug* | string | Workspace slug selected during agent authorization. |
{
"type": "object",
"required": [
"workspaceSlug",
"assessmentId"
],
"properties": {
"assessmentId": {
"type": "string",
"maxLength": 128,
"minLength": 1
},
"workspaceSlug": {
"type": "string",
"pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
"maxLength": 80,
"minLength": 1,
"description": "Workspace slug selected during agent authorization."
}
},
"additionalProperties": false
}Return one workspace asset and its current authorization state.
| Argument | Type | Description |
|---|---|---|
| assetId* | string | |
| workspaceSlug* | string | Workspace slug selected during agent authorization. |
{
"type": "object",
"required": [
"workspaceSlug",
"assetId"
],
"properties": {
"assetId": {
"type": "string",
"maxLength": 128,
"minLength": 1
},
"workspaceSlug": {
"type": "string",
"pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
"maxLength": 80,
"minLength": 1,
"description": "Workspace slug selected during agent authorization."
}
},
"additionalProperties": false
}Return current public boundaries and, when authenticated, workspace-specific tool reachability, scopes, and role requirements.
No arguments.
{
"type": "object",
"required": [],
"properties": {},
"additionalProperties": false
}Return available, reserved, and used assessment credits for the approved workspace.
| Argument | Type | Description |
|---|---|---|
| workspaceSlug* | string | Workspace slug selected during agent authorization. |
{
"type": "object",
"required": [
"workspaceSlug"
],
"properties": {
"workspaceSlug": {
"type": "string",
"pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
"maxLength": 80,
"minLength": 1,
"description": "Workspace slug selected during agent authorization."
}
},
"additionalProperties": false
}Return one finding with evidence-safe lifecycle history and related asset metadata.
| Argument | Type | Description |
|---|---|---|
| findingId* | string | |
| workspaceSlug* | string | Workspace slug selected during agent authorization. |
{
"type": "object",
"required": [
"workspaceSlug",
"findingId"
],
"properties": {
"findingId": {
"type": "string",
"maxLength": 128,
"minLength": 1
},
"workspaceSlug": {
"type": "string",
"pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
"maxLength": 80,
"minLength": 1,
"description": "Workspace slug selected during agent authorization."
}
},
"additionalProperties": false
}Return the authenticated account and the workspace bound to this agent connection.
No arguments.
{
"type": "object",
"required": [],
"properties": {},
"additionalProperties": false
}Return one cleared Hacker Bob CVE record by identifier, including its open-source project, publication status, and upstream public record URL when available.
| Argument | Type | Description |
|---|---|---|
| recordId* | string | CVE identifier such as CVE-2026-47747. |
{
"type": "object",
"required": [
"recordId"
],
"properties": {
"recordId": {
"type": "string",
"pattern": "^CVE-[0-9]{4}-[0-9]+$",
"description": "CVE identifier such as CVE-2026-47747."
}
},
"additionalProperties": false
}Return one released, non-revoked workspace report. Pending review material and access credentials are never returned.
| Argument | Type | Description |
|---|---|---|
| reportId* | string | |
| workspaceSlug* | string | Workspace slug selected during agent authorization. |
{
"type": "object",
"required": [
"workspaceSlug",
"reportId"
],
"properties": {
"reportId": {
"type": "string",
"maxLength": 128,
"minLength": 1
},
"workspaceSlug": {
"type": "string",
"pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
"maxLength": 80,
"minLength": 1,
"description": "Workspace slug selected during agent authorization."
}
},
"additionalProperties": false
}Return the approved workspace and current membership role.
| Argument | Type | Description |
|---|---|---|
| workspaceSlug* | string | Workspace slug selected during agent authorization. |
{
"type": "object",
"required": [
"workspaceSlug"
],
"properties": {
"workspaceSlug": {
"type": "string",
"pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
"maxLength": 80,
"minLength": 1,
"description": "Workspace slug selected during agent authorization."
}
},
"additionalProperties": false
}Consume a recent human approval and submit the immutable assessment to Hacker Bob's managed queue. The target is resolved only from the stored verified asset.
| Argument | Type | Description |
|---|---|---|
| assessmentId* | string | |
| workspaceSlug* | string | Workspace slug selected during agent authorization. |
| idempotencyKey* | string |
{
"type": "object",
"required": [
"workspaceSlug",
"assessmentId",
"idempotencyKey"
],
"properties": {
"assessmentId": {
"type": "string",
"maxLength": 128,
"minLength": 1
},
"workspaceSlug": {
"type": "string",
"pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
"maxLength": 80,
"minLength": 1,
"description": "Workspace slug selected during agent authorization."
},
"idempotencyKey": {
"type": "string",
"maxLength": 128,
"minLength": 8
}
},
"additionalProperties": false
}List assessments and current run states in the approved workspace.
| Argument | Type | Description |
|---|---|---|
| workspaceSlug* | string | Workspace slug selected during agent authorization. |
| includeArchived | boolean |
{
"type": "object",
"required": [
"workspaceSlug"
],
"properties": {
"workspaceSlug": {
"type": "string",
"pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
"maxLength": 80,
"minLength": 1,
"description": "Workspace slug selected during agent authorization."
},
"includeArchived": {
"type": "boolean"
}
},
"additionalProperties": false
}List workspace assets and current ownership-authorization state without contacting a target.
| Argument | Type | Description |
|---|---|---|
| workspaceSlug* | string | Workspace slug selected during agent authorization. |
| includeArchived | boolean | Include archived assets. Defaults to false. |
{
"type": "object",
"required": [
"workspaceSlug"
],
"properties": {
"workspaceSlug": {
"type": "string",
"pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
"maxLength": 80,
"minLength": 1,
"description": "Workspace slug selected during agent authorization."
},
"includeArchived": {
"type": "boolean",
"description": "Include archived assets. Defaults to false."
}
},
"additionalProperties": false
}List recent workspace audit events with optional actor, action, and time filters.
| Argument | Type | Description |
|---|---|---|
| toAt | number | |
| actor | string | |
| action | string | |
| fromAt | number | |
| workspaceSlug* | string | Workspace slug selected during agent authorization. |
{
"type": "object",
"required": [
"workspaceSlug"
],
"properties": {
"toAt": {
"type": "number",
"minimum": 0
},
"actor": {
"type": "string",
"maxLength": 254
},
"action": {
"type": "string",
"maxLength": 80
},
"fromAt": {
"type": "number",
"minimum": 0
},
"workspaceSlug": {
"type": "string",
"pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
"maxLength": 80,
"minLength": 1,
"description": "Workspace slug selected during agent authorization."
}
},
"additionalProperties": false
}List workspace findings with optional lifecycle and severity filters.
| Argument | Type | Description |
|---|---|---|
| status | string | |
| assetId | string | |
| severity | string | |
| workspaceSlug* | string | Workspace slug selected during agent authorization. |
{
"type": "object",
"required": [
"workspaceSlug"
],
"properties": {
"status": {
"type": "string",
"maxLength": 40
},
"assetId": {
"type": "string",
"maxLength": 128,
"minLength": 1
},
"severity": {
"enum": [
"critical",
"high",
"medium",
"low"
],
"type": "string"
},
"workspaceSlug": {
"type": "string",
"pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
"maxLength": 80,
"minLength": 1,
"description": "Workspace slug selected during agent authorization."
}
},
"additionalProperties": false
}List cleared public Hacker Bob Common Vulnerabilities and Exposures records with cursor pagination and optional project or publication-status filters.
| Argument | Type | Description |
|---|---|---|
| limit | integer | Maximum records to return. Defaults to 20. |
| cursor | string | Opaque cursor returned by a previous list call. |
| status | string | Publication status to include. |
| project | string | Exact open-source project name to include. |
{
"type": "object",
"required": [],
"properties": {
"limit": {
"type": "integer",
"maximum": 100,
"minimum": 1,
"description": "Maximum records to return. Defaults to 20."
},
"cursor": {
"type": "string",
"description": "Opaque cursor returned by a previous list call."
},
"status": {
"enum": [
"public",
"assigned-no-public-record"
],
"type": "string",
"description": "Publication status to include."
},
"project": {
"type": "string",
"description": "Exact open-source project name to include."
}
},
"additionalProperties": false
}List non-revoked reports released to the approved workspace.
| Argument | Type | Description |
|---|---|---|
| workspaceSlug* | string | Workspace slug selected during agent authorization. |
{
"type": "object",
"required": [
"workspaceSlug"
],
"properties": {
"workspaceSlug": {
"type": "string",
"pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
"maxLength": 80,
"minLength": 1,
"description": "Workspace slug selected during agent authorization."
}
},
"additionalProperties": false
}List active Hacker Bob workspaces available to the authenticated account. The connection remains bound to its approved workspace.
No arguments.
{
"type": "object",
"required": [],
"properties": {},
"additionalProperties": false
}Create an immutable assessment for a verified stored asset and return a browser approval URL. This never contacts the target.
| Argument | Type | Description |
|---|---|---|
| depth* | string | |
| assetId* | string | |
| coverage* | object | |
| boundaries | string | |
| workspaceSlug* | string | Workspace slug selected during agent authorization. |
| idempotencyKey* | string | |
| interactionPolicy* | string |
{
"type": "object",
"required": [
"workspaceSlug",
"assetId",
"depth",
"coverage",
"interactionPolicy",
"idempotencyKey"
],
"properties": {
"depth": {
"enum": [
"standard",
"deep"
],
"type": "string"
},
"assetId": {
"type": "string",
"maxLength": 128,
"minLength": 1
},
"coverage": {
"type": "object",
"required": [
"mode",
"rules"
],
"properties": {
"mode": {
"enum": [
"all",
"exclude",
"include"
],
"type": "string"
},
"rules": {
"type": "array",
"items": {
"type": "string",
"maxLength": 240,
"minLength": 1
},
"maxItems": 100
}
},
"additionalProperties": false
},
"boundaries": {
"type": "string",
"maxLength": 1000
},
"workspaceSlug": {
"type": "string",
"pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
"maxLength": 80,
"minLength": 1,
"description": "Workspace slug selected during agent authorization."
},
"idempotencyKey": {
"type": "string",
"maxLength": 128,
"minLength": 8
},
"interactionPolicy": {
"enum": [
"safe",
"stateful"
],
"type": "string"
}
},
"additionalProperties": false
}Search cleared public Hacker Bob CVE records by CVE identifier, open-source project name, or publication status without contacting any assessment target.
| Argument | Type | Description |
|---|---|---|
| limit | integer | Maximum matching records to return. Defaults to 20. |
| query* | string | Text to match against CVE identifiers, project names, and publication status. |
{
"type": "object",
"required": [
"query"
],
"properties": {
"limit": {
"type": "integer",
"maximum": 50,
"minimum": 1,
"description": "Maximum matching records to return. Defaults to 20."
},
"query": {
"type": "string",
"minLength": 1,
"description": "Text to match against CVE identifiers, project names, and publication status."
}
},
"additionalProperties": false
}