- Conduid
- Marketplace
- #bug-bounty
MCP servers tagged bug-bounty
55 live MCP servers tagged "bug-bounty", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with bug-bounty.
Awesome Hacking Lists
A curated collection of top-tier penetration testing tools and productivity utilities across multiple domains. Join us to explore, contribute, and enhance your hacking toolkit!
Pentest Swarm AI
Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty,…
Cybermes
Zero-Go Model Context Protocol (MCP) Server for Cybermes Autonomous Security & Diagnostic Framework
Numasec
The AI Agent for Cyber Security.
Pentesting Cyber MCP
🔐 50+ MCP Security Servers for AI-Powered Pentesting | Integrate Nmap, Burp Suite, Nuclei, Shodan, BloodHound, Semgrep, Trivy | Model Context Protocol for Cybersecurity
Reconmap
Reconmap is a collaboration-first security operations platform for infosec teams and MSSPs, enabling end‑to‑end engagement management, from reconnaissance through execution and re…
Externalattacker MCP
A modular external attack surface mapping tool integrating tools for automated reconnaissance and bug bounty workflows.
CyberStrike
AI-powered offensive security agent. Autonomous pentesting with 13+ specialized agents, 120+ OWASP test cases, 15+ LLM providers, and Bolt remote tool servers. Your AI red team.
Pentest Agents
Autonomous bug-bounty framework for Claude Code — 40 specialist agents, exploit-chain builder, writeup search, and live HackerOne/Bugcrowd integration.
Mantishack
Mantis Hack
AI Osint
🤖 Curated AI OSINT resources — Google dorks, Shodan queries, GitHub dorks, and techniques to discover exposed LLM endpoints, leaked AI API keys, misconfigured vector databases, an…
Antares
Antares: a self-hosted AI pentest agent and assistant in one binary. Authorized penetration testing with security specialists, 7,000+ procedures and reports, plus files, shell, a…
Awesome AI Pentesting
A curated list of AI-powered pentesting tools, frameworks, MCP servers, and resources for autonomous cybersecurity operations
Bug Bounty Agents
AI-Powered Agents for Bub-Bounty Pentesting and Red-Teaming purposes
Bountyhunter
Autonomous bug bounty hunting framework for Claude Code — 7-phase FSM, parallel hunter agents, 3-round adversarial verification, MCP control plane. Speed-tunable harness modes (fa…
Awesome Molt Ecosystem
The brutally honest map of where AI-agent money actually flows. Every number measured, dated, and re-checked — including the ones that turned out to be wrong. Lifetime external in…
Bughunter AI
Autonomous Bug Bounty Hunting Framework powered by Claude Code. 20 AI agents, state-machine orchestration, Burp Suite MCP, credential vault, LLM security track. Type 'hunt target.…
Outrider Recon
Claude-native, governed offensive-OSINT & external attack-surface platform for authorized red-team and bug-bounty. Multi-agent recon across web, identity, cloud, secrets & breach…
Pentest AI
The most autonomous pentesting AI on the market. MCP server + Python agents with 150+ security tools, exploit chaining, and PoC validation.
WonderSuite AI Bug Bounty
AI-Powered Offensive Security Research Engine - desktop-native security testing platform with native MCP integration. 90 tools, MITM proxy, stealth browser, autonomous AI agent. B…
Hackbrowser MCP
The first browser MCP built for security testing. Give your AI agent a real Firefox browser and let it find vulnerabilities.
Bugbountyrules
Behavioral-discipline skill turning an AI agent into a methodical, non-robotic bug-bounty & pentest hunter - 42 always-on rules: scope, coverage, no false positives, never quits e…
AI Pentest Playbook
🛡 The reference playbook for pentesting AI chatbots & LLM-powered apps in one place. Ready-to-use payloads covering the full OWASP LLM Top 10 plus frontier vectors (MCP · RAG · A2…
Pi Casefile
Offensive security case tracker for pi and Codex — bug bounties, CTFs, security audits
Hackerone
MCP server for the HackerOne Hacker API (Hackers section only). Built from https://api.hackerone.com/hacker-resources/
Blitzstrike
⚡ Blitz Strike — a universal MCP penetration-testing toolbelt. Structured methodology: reconnaissance & attack-surface mapping, source-to-sink analysis, and live validation. 57 es…
Jcyber
Agent-driven bug bounty / pentest framework: one gated chain over five systems (Caido, HexStrike, Jev, Memgraph, TencentDB, Prometheus)
Bounty Operator
Find the hole in your bug bounty report before the triager does. Pre-submission review for bounty reports and smart-contract findings, on your own model key.
Zap MCP Server
Production-grade OWASP ZAP MCP server for authorized penetration testing and bug-bounty workflows (67 curated tools, authenticated scanning, target authorization policy).
Bounty Hunter MCP
Give your AI superpowers for bug bounty hunting. MCP server that turns Claude Code into a structured bug bounty toolkit — recon, live testing, intelligence, and report generation.
Bugsecure MCP
MCP server for the BugSecure bug bounty platform => browse programmes, work on your reports and triage
Hugin
A power tool for web security testing — scanner, repeater, intruder, and AI agent in one Rust binary. No accounts, no telemetry, no cloud.
Cybersec Toolkit
580+ cybersecurity tools, one command. Modular bash installer for Linux & Termux with 14 profiles, 18 modules, and an MCP server for AI-assisted ethical hacking.
Bearstrike AI
🐻 BearStrike AI: High-Signal Pentesting Console (MCP-First, Model-Agnostic). Build fast, low-noise security workflows with queue-first execution, skills-aware planning, and 150+ i…
BreachPilot
Autonomous Offensive Security Agent for Red Team Operations
Pentest Autopilot Mcps
Professional MCP servers for penetration testing automation - SQLi, Exploit, Auth, Recon
Hopper Recon
Self-hosted attack-surface recon — point it at a domain you own and map subdomains, DNS, TLS, HTTP, CDN, and historical URLs in one dashboard. The same tools run over MCP, so AI a…
Pentos
Wissensgetriebener, lokaler Pentest-Workspace (CLI) für CTF, Bug Bounty & autorisierte Tests – geführte Recon, Findings/Loot/Reports, Web-Dashboard, lokale KI-Unterstützung & MCP-…
Security Hunter MCP
🛡️ Production-grade Model Context Protocol (MCP) Server for Autonomous AI Security Bug Hunting, Persistent Pentest Memory, Dynamic Checklists, Secret Redaction, and Exploit PoC Ge…
Crt.sh Skills
Comprehensive crt.sh wrapper: Skills · MCP Server · CLI · Go SDK — search CT logs, retrieve certs, investigate CAs, lint certificates, monitor Atom feeds. Every crt.sh feature wra…
Hacking Cockpit Lite
Ringan, single-file MCP Server untuk pentesting dengan fitur rare: parallel recon, findings DB + compliance auto-tag (OWASP/PCI/CWE), intel correlation, attack-path analyzer, scan…
Mobix
Authorized Android pentest lab, drivable by hand or by AI — Frida bypass chain, live traffic capture with automatic IDOR flagging, full MCP control plane, web dashboard.
Swaggervu
A simple, evidence-first Swagger/OpenAPI security workbench with a policy-bounded MCP server.
The Box MCP
MCP daemon that gives an agentic coding client a native offensive-security toolchain: MITM proxy, app graph, OOB server, CVE/report RAG and 103 tools.
Shellockolm AI CLI MCP Scanner
Welcome to Shellockolm-ai-CLI-MCP-Scanner - 🎯 Your React app is probably vulnerable. Find out in 30 seconds 🚀
Flameshot MCP
Servidor MCP do Flameshot: seu agente tira o print e marca a evidencia sozinho - retangulo, seta, texto, blur e numeradores por chamada de ferramenta
Offsec MCP
MCP server that gives AI agents authorized-only offensive-security tools: recon, CVE intel, JS analysis, port scanning
Hackbot
A control plane for LLM-driven offensive security work, with a human in the loop. Bounded workers, content-addressed evidence, and a four-tier gate where two tiers are not models…
Yteam
Local-first, policy-bound security research workbench with an OpenCode-style TUI, durable jobs, adaptive planning, LocalSolver, and read-only MCP.
Burpsuite For AI Agent
Two-way Burp Suite MCP bridge for AI agents — capture traffic, queue scan tasks, send findings back to Burp as Scanner issues or Repeater tabs. MCP server + Jython plugin.