MCP server that connects AI assistants to HackerOne for bug bounty hunting

Unofficial MCP server for accessing your HackerOne reports, programs, scope, and earnings from Claude Code

MCP server for the HackerOne GraphQL API

No description available

HackerOne MCP server for VDP/bug bounty triage via Claude Code

An MCP (Model Context Protocol) server that connects Claude, Claude codex and other mcp clients to the HackerOne Hackers API.

Claude Code MCP Workspace Trust Escalation — enableAllProjectMcpServers flag bypasses server identity validation, allowing silent connection of unauthorized MCP servers. Reported to Anthropic HackerOne VDP.

Security research: Silent arbitrary command execution via malicious .mcp.json in Claude Code. Demonstrates how modified MCP server configurations execute without re-validation after initial trust. Reported to Anthropic via HackerOne, closed as Informative (by-design behavior).