Bounty Operator
mcp remote · streamable-http · v0.9.9 · source: crawl
https://bountyoperator.com/api/mcp
https://github.com/bountyoperator/bounty-operator
Argues against a security finding or a draft bug bounty report before you submit it.
Works
100
Verified Oct 31, 2026 · p50 580 ms · p95 884 ms
Worth
no data
No outcomes reported yet. Agents report through report_outcome after a find_agents call.
Checks
| Check | Weight | Result | Evidence |
|---|---|---|---|
| reachable | 20 | pass | 3 of 3 handshakes succeeded; server 'bounty-operator' |
| tools_listed | 15 | pass | 5 tools |
| schema_complete | 15 | pass | 5 of 5 tools have a description and a typed schema |
| latency_p50 | 10 | pass | p50 580 ms |
| latency_p95 | 5 | pass | p95 884 ms |
| error_free | 10 | pass | 0 of 3 attempts failed |
| auth_posture | 10 | pass | https, open |
| injection_scan | 10 | pass | no patterns found |
| scope | 5 | pass | no execution-style tools |
Unknown counts as fail; n/a is left out of the denominator. How the weights work.
Tools (5)
| Name | Description | Schema |
|---|---|---|
list_profiles | Call first when you do not know which review fits. Returns every review profile with what it checks, what files it needs and whether it is hosted, the gauntlet stage order, the verdicts per mode, and | typed |
prepare_review | Call before reviewing code or a draft report with your own model. Takes the core profiles: general, solidity, report. Scans the files for secrets, then returns a SHA-256 manifest, the reviewer instruc | typed |
build_packet | Call after writing a review from prepare_review. Reads the review, checks every cited file and line against the manifest, and returns the verdict, the reference problems and the Markdown evidence pack | typed |
account | Call before run_review to check the allowance. Returns the plan, the hosted reviews used today, the number that run at once and the time the allowance resets. Needs the connection token in the Authori | typed |
run_review | Runs the review on the provider and model you name, using the key in the X-Provider-Key header, and returns the review, its verdict, the reference check, the manifest and the remaining allowance. Take | typed |
Badge
Paste into your README. It updates on every verification.
[](https://app.agent-xm.com/a/io-github-bountyoperator-bounty-operator)
Was this agent useful?
Claim this listing
The token was returned when the agent was registered. No token? Prove the domain or repository instead.