io.github.bobnetsecPublished by GitHub account bobnetsecv1.0.0Updated Oct 28, 2026
Read-only public CVE records, capability metadata, and agent instructions from Hacker Bob.
Hacker Bob public records server: lets an assistant browse cleared public CVE records and, when authenticated, manage workspace assets, assessments, findings…
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.
Read https://sourceweft.com/mcp/io.github.bobnetsec%2Fhacker-bob-public-records/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.Add this to your client's mcpServers config.
{
"mcpServers": {
"hacker-bob-public-records": {
"type": "http",
"url": "https://hackerbob.ai/mcp"
}
}
}This repository has no README.
List public CVE records
List cleared public Hacker Bob Common Vulnerabilities and Exposures records with cursor pagination and optional project or publication-status filters.
limitcursorstatusprojectGet one public CVE record
Return one cleared Hacker Bob CVE record by identifier, including its open-source project, publication status, and upstream public record URL when available.
recordIdrequiredSearch public CVE records
Search cleared public Hacker Bob CVE records by CVE identifier, open-source project name, or publication status without contacting any assessment target.
limitqueryrequiredGet Hacker Bob capabilities
Return current public boundaries and, when authenticated, workspace-specific tool reachability, scopes, and role requirements.
Takes no parameters.
Get my Hacker Bob account
Return the authenticated account and the workspace bound to this agent connection.
Takes no parameters.
List my workspaces
List active Hacker Bob workspaces available to the authenticated account. The connection remains bound to its approved workspace.
Takes no parameters.
Get workspace
Return the approved workspace and current membership role.
workspaceSlugrequiredList authorized assets
List workspace assets and current ownership-authorization state without contacting a target.
workspaceSlugrequiredincludeArchivedGet authorized asset
Return one workspace asset and its current authorization state.
assetIdrequiredworkspaceSlugrequiredBegin domain authorization
Create a DNS TXT or HTTPS-file challenge proving control of a domain. This does not run an assessment.
labeldomainrequiredmethodrequiredworkspaceSlugrequiredidempotencyKeyrequiredCheck domain authorization
Check the previously issued DNS or HTTPS proof and update the asset authorization state.
workspaceSlugrequiredidempotencyKeyrequiredauthorizationIdrequiredList assessments
List assessments and current run states in the approved workspace.
workspaceSlugrequiredincludeArchivedGet assessment
Return one assessment, its verified asset, current run state, and any pending human approval.
assessmentIdrequiredworkspaceSlugrequiredPrepare assessment
Create an immutable assessment for a verified stored asset and return a browser approval URL. This never contacts the target.
depthrequiredassetIdrequiredcoveragerequiredboundariesworkspaceSlugrequiredidempotencyKeyrequiredinteractionPolicyrequiredSubmit approved assessment
Consume a recent human approval and submit the immutable assessment to Hacker Bob's managed queue. The target is resolved only from the stored verified asset.
assessmentIdrequiredworkspaceSlugrequiredidempotencyKeyrequiredCancel assessment
Cancel an eligible queued or running assessment and reconcile any refundable reserved credit.
assessmentIdrequiredworkspaceSlugrequiredidempotencyKeyrequiredList findings
List workspace findings with optional lifecycle and severity filters.
statusassetIdseverityworkspaceSlugrequiredGet finding
Return one finding with evidence-safe lifecycle history and related asset metadata.
findingIdrequiredworkspaceSlugrequiredList released reports
List non-revoked reports released to the approved workspace.
workspaceSlugrequiredGet released report
Return one released, non-revoked workspace report. Pending review material and access credentials are never returned.
reportIdrequiredworkspaceSlugrequiredGet credit summary
Return available, reserved, and used assessment credits for the approved workspace.
workspaceSlugrequiredList audit events
List recent workspace audit events with optional actor, action, and time filters.
toAtactoractionfromAtworkspaceSlugrequired75% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.
Declare a license in the repository or the registry entry.
