HackerOne FAQs

Question 1

What is the HackerOne MCP Server?

Accepted Answer

It's an MCP (Model Context Protocol) server that connects AI models like Claude and other MCP clients directly to the HackerOne Hackers API, facilitating comprehensive bug bounty program and report management.

Question 2

How do I secure my HackerOne API credentials when using this tool?

Accepted Answer

For maximum security, always configure your HackerOne API username and token using environment variables (e.g., HACKERONE_USERNAME, HACKERONE_API_TOKEN). Never hardcode your API token directly into source files, as it grants full access to your HackerOne account.

Question 3

What functionalities does this integration provide?

Accepted Answer

Users can list and filter HackerOne reports by various criteria, retrieve full details of specific reports, access in-scope and out-of-scope assets, fetch program policies/bounties, and discover all accessible HackerOne programs.

Question 4

Which AI models or clients can utilize this server?

Accepted Answer

This server is built for MCP clients, including Claude Desktop, Claude Code (CLI), and any other compatible MCP-enabled applications that support standard I/O for communication.

Question 5

What kind of natural language prompts can I use with connected AI models?

Accepted Answer

Once connected, you can use prompts like 'List my open HackerOne reports,' 'Show me all critical severity reports,' 'What's in scope for the [program_name] program?', or 'Get the full details of report [report_ID].'

HackerOne

HackerOne

Características Principales

Casos de Uso

Características Principales

Casos de Uso