1. Conduid
  2. Developer Tools
  3. Yeswehack MCP
MCP server · Developer Tools

Yeswehack MCP

by · github.com/sebastianolaru3008/yeswehack-mcp

MCP server for YesWeHack. Let AI agents browse programs, query scopes, filter bounties, authenticate with 2FA, and automate bug bounty workflows.

Unclaimed last commit 6 months ago bugbountyclaudellmmcp-serveryeswehack
InstallView source
34Low

Scored 26 days ago · breakdown

About Yeswehack MCP

Yeswehack MCP is an MCP server published by sebastianolaru3008 in the Developer Tools category: mCP server for YesWeHack. Let AI agents browse programs, query scopes, filter bounties, authenticate with 2FA, and automate bug bounty workflows.

The repository has 1 stars and 2 forks, with the last commit 6 months ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.

Install

From source
git clone https://github.com/sebastianolaru3008/yeswehack-mcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (12)

authenticateBrowser login, API login, or store a copied bearer token/PAT

Parameters not published.

get_current_userShow your YesWeHack profile (username, rank, reputation)

Parameters not published.

get_hacktivityBrowse the public hacktivity (disclosed reports) feed

Parameters not published.

get_programFull details for a program: scope, reward ranges, status

Parameters not published.

get_program_credentialsList credential pools and assigned credentials for a program

Parameters not published.

get_reportFull details of a specific report (title, severity, CVSS, description, bounty)

Parameters not published.

list_email_aliasesList your YesWeHack email aliases

Parameters not published.

list_programsList all programs you have access to, including private invite-only ones

Parameters not published.

list_report_commentsList comments/messages for a report when your token has access

Parameters not published.

list_reportsList reports for a program, with optional status filter

Parameters not published.

request_program_credentialsRequest credentials from a program credential pool

Parameters not published.

yeswehack_api_getRead-only escape hatch for authenticated API endpoints not wrapped yet

Parameters not published.

Ask AI

✦

Ask AI about Yeswehack MCP

Powered by Claude · Grounded in docs

I know everything about Yeswehack MCP. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Yeswehack MCP

How do I install Yeswehack MCP?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Yeswehack MCP safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Yeswehack MCP still maintained?

The last commit was 6 months ago. That's long enough that you should check whether the maintainer is responding to issues before depending on it.