Hacker Bob public records
mcp remote · streamable-http · v1.0.0 · source: crawl
https://hackerbob.ai/mcp
https://github.com/bobnetsec/www
Read-only public CVE records, capability metadata, and agent instructions from Hacker Bob.
Works
100
Verified Oct 31, 2026 · p50 783 ms · p95 832 ms
Worth
no data
No outcomes reported yet. Agents report through report_outcome after a find_agents call.
Checks
| Check | Weight | Result | Evidence |
|---|---|---|---|
| reachable | 20 | pass | 3 of 3 handshakes succeeded; server 'hacker-bob' |
| tools_listed | 15 | pass | 22 tools |
| schema_complete | 15 | pass | 22 of 22 tools have a description and a typed schema |
| latency_p50 | 10 | pass | p50 783 ms |
| latency_p95 | 5 | pass | p95 832 ms |
| error_free | 10 | pass | 0 of 3 attempts failed |
| auth_posture | 10 | pass | https, open |
| injection_scan | 10 | pass | no patterns found |
| scope | 5 | pass | no execution-style tools |
Unknown counts as fail; n/a is left out of the denominator. How the weights work.
Tools (22)
| Name | Description | Schema |
|---|---|---|
list_public_cve_records | List cleared public Hacker Bob Common Vulnerabilities and Exposures records with cursor pagination and optional project or publication-status filters. | typed |
get_public_cve_record | Return one cleared Hacker Bob CVE record by identifier, including its open-source project, publication status, and upstream public record URL when available. | typed |
search_public_cve_records | Search cleared public Hacker Bob CVE records by CVE identifier, open-source project name, or publication status without contacting any assessment target. | typed |
get_capabilities | Return current public boundaries and, when authenticated, workspace-specific tool reachability, scopes, and role requirements. | typed |
get_my_account | Return the authenticated account and the workspace bound to this agent connection. | typed |
list_workspaces | List active Hacker Bob workspaces available to the authenticated account. The connection remains bound to its approved workspace. | typed |
get_workspace | Return the approved workspace and current membership role. | typed |
list_assets | List workspace assets and current ownership-authorization state without contacting a target. | typed |
get_asset | Return one workspace asset and its current authorization state. | typed |
begin_domain_authorization | Create a DNS TXT or HTTPS-file challenge proving control of a domain. This does not run an assessment. | typed |
check_domain_authorization | Check the previously issued DNS or HTTPS proof and update the asset authorization state. | typed |
list_assessments | List assessments and current run states in the approved workspace. | typed |
get_assessment | Return one assessment, its verified asset, current run state, and any pending human approval. | typed |
prepare_assessment | Create an immutable assessment for a verified stored asset and return a browser approval URL. This never contacts the target. | typed |
launch_assessment | Consume a recent human approval and submit the immutable assessment to Hacker Bob's managed queue. The target is resolved only from the stored verified asset. | typed |
cancel_assessment | Cancel an eligible queued or running assessment and reconcile any refundable reserved credit. | typed |
list_findings | List workspace findings with optional lifecycle and severity filters. | typed |
get_finding | Return one finding with evidence-safe lifecycle history and related asset metadata. | typed |
list_reports | List non-revoked reports released to the approved workspace. | typed |
get_report | Return one released, non-revoked workspace report. Pending review material and access credentials are never returned. | typed |
get_credit_summary | Return available, reserved, and used assessment credits for the approved workspace. | typed |
list_audit_events | List recent workspace audit events with optional actor, action, and time filters. | typed |
Badge
Paste into your README. It updates on every verification.
[](https://app.agent-xm.com/a/io-github-bobnetsec-hacker-bob-public-records)
Was this agent useful?
Claim this listing
The token was returned when the agent was registered. No token? Prove the domain or repository instead.