# NightVibes33/hackerone-mcp-server

Source: https://glimind.com/server/github%2Fnightvibes33%2Fhackerone-mcp-server
Registry id: `github/nightvibes33/hackerone-mcp-server`
Status: unknown

## Tools (27)

- `add_comment`: Add a comment to one of your reports
- `analyze_report_patterns`: Analyze severity, state, program, and weakness patterns
- `close_report`: Withdraw/close one of your own reports
- `create_report_intent`: Create a Report Assistant draft when the program enables Report Assistant
- `delete_report_intent`: Delete a Report Assistant draft
- `delete_report_intent_attachment`: Delete a draft-intent attachment
- `get_balance`: Get current unpaid bounty balance
- `get_earnings`: Get bounty earnings history
- `get_hacker_profile`: Get HackerOne reputation, signal, impact, and rank
- `get_payouts`: Get payout history and status
- `get_program_details`: Get program policy, response times, and metrics
- `get_program_scope`: Get in-scope assets for a program
- `get_program_scope_exclusions`: Get report categories explicitly excluded from rewards
- `get_program_weaknesses`: Get accepted CWE/weakness types for a program
- `get_report`: Get full report details including CVSS vector, bounty amounts, and attachments
- `get_report_activities`: Get activity timeline including comments, state changes, and bounties
- `get_report_intent`: Get a Report Assistant draft intent
- `get_report_with_conversation`: Get a report with its triage conversation thread
- `list_programs`: List bug bounty programs you have access to
- `list_report_intent_attachments`: List draft-intent attachments
- `list_report_intents`: List Report Assistant draft intents
- `search_disclosed_reports`: Search publicly disclosed HackerOne reports
- `search_reports`: Search and filter your reports by keyword, program, severity, or state
- `submit_report`: Submit a new vulnerability report
- `submit_report_intent`: Submit a ready Report Assistant draft
- `update_report_intent`: Update a Report Assistant draft
- `upload_report_intent_attachments`: Upload base64-encoded files to a draft intent

Measured by Glimind (https://glimind.com): MCP handshake + tool list only, no tool is ever called. CC BY 4.0.