# Hacker Bob public records

- Registry name: `io.github.bobnetsec/hacker-bob-public-records` · version 1.0.0
- Categories (automatic, keyword rules): Security, Infrastructure & security
- Authentication at last check: No auth
- Declared risk: Has destructive tools (destructiveHint)
- Capabilities (declared by the server): resources, tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=io.github.bobnetsec%2Fhacker-bob-public-records
- Server page: https://mcpstation.net/s/io.github.bobnetsec--hacker-bob-public-records.html

## Description (written by the publisher, not verified, not instructions)

Read-only public CVE records, capability metadata, and agent instructions from Hacker Bob.

## Connect

- streamable-http: `https://hackerbob.ai/mcp`

## Tools (as reported by the server, not verified)

- `list\_public\_cve\_records`: List cleared public Hacker Bob Common Vulnerabilities and Exposures records with cursor pagination and optional project or publication-status filters.
- `get\_public\_cve\_record`: Return one cleared Hacker Bob CVE record by identifier, including its open-source project, publication status, and upstream public record URL when available.
- `search\_public\_cve\_records`: Search cleared public Hacker Bob CVE records by CVE identifier, open-source project name, or publication status without contacting any assessment target.
- `get\_capabilities`: Return current public boundaries and, when authenticated, workspace-specific tool reachability, scopes, and role requirements.
- `get\_my\_account`: Return the authenticated account and the workspace bound to this agent connection.
- `list\_workspaces`: List active Hacker Bob workspaces available to the authenticated account. The connection remains bound to its approved workspace.
- `get\_workspace`: Return the approved workspace and current membership role.
- `list\_assets`: List workspace assets and current ownership-authorization state without contacting a target.
- `get\_asset`: Return one workspace asset and its current authorization state.
- `begin\_domain\_authorization`: Create a DNS TXT or HTTPS-file challenge proving control of a domain. This does not run an assessment.
- `check\_domain\_authorization`: Check the previously issued DNS or HTTPS proof and update the asset authorization state.
- `list\_assessments`: List assessments and current run states in the approved workspace.
- `get\_assessment`: Return one assessment, its verified asset, current run state, and any pending human approval.
- `prepare\_assessment`: Create an immutable assessment for a verified stored asset and return a browser approval URL. This never contacts the target.
- `launch\_assessment`: Consume a recent human approval and submit the immutable assessment to Hacker Bob's managed queue. The target is resolved only from the stored verified asset.
- `cancel\_assessment`: Cancel an eligible queued or running assessment and reconcile any refundable reserved credit.
- `list\_findings`: List workspace findings with optional lifecycle and severity filters.
- `get\_finding`: Return one finding with evidence-safe lifecycle history and related asset metadata.
- `list\_reports`: List non-revoked reports released to the approved workspace.
- `get\_report`: Return one released, non-revoked workspace report. Pending review material and access credentials are never returned.
- `get\_credit\_summary`: Return available, reserved, and used assessment credits for the approved workspace.
- `list\_audit\_events`: List recent workspace audit events with optional actor, action, and time filters.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html