Hacker Bob public records
REMOTE · HACKERBOB.AI · SCANNED SEP 23
Read-only public CVE records, capability metadata, and agent instructions from Hacker Bob.
Available components
Recent critical change
Authorization (4 Sept 2026). See the changelog before you install this server.
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security57
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation check failed: no authorisation is required to call this server, and it exposes a tool marked destructive (launch_assessment). See how to fix → View diagnostics → Fail
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability85
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (good).Pass
- Tool/resource definitions use about 1280 tokens (~51/item across 25 items; 22 tools + 3 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage83
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 48% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 22 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 24 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the Hacker Bob public records MCP server?
Hacker Bob public records is a hosted endpoint at https://hackerbob.ai/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · hackerbob.ai
claude mcp add --transport http bobnetsec-hacker-bob-public-records 'https://hackerbob.ai/mcp'
{
"mcpServers": {
"bobnetsec-hacker-bob-public-records": {
"url": "https://hackerbob.ai/mcp"
}
}
} {
"servers": {
"bobnetsec-hacker-bob-public-records": {
"type": "http",
"url": "https://hackerbob.ai/mcp"
}
}
} [mcp_servers.bobnetsec-hacker-bob-public-records] url = "https://hackerbob.ai/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"bobnetsec-hacker-bob-public-records": {
"type": "remote",
"url": "https://hackerbob.ai/mcp",
"enabled": true
}
}
} openclaw mcp add bobnetsec-hacker-bob-public-records --url 'https://hackerbob.ai/mcp' --transport streamable-http
mcp_servers:
bobnetsec-hacker-bob-public-records:
url: "https://hackerbob.ai/mcp" {
"McpServers": {
"bobnetsec-hacker-bob-public-records": {
"Transport": "http",
"Url": "https://hackerbob.ai/mcp"
}
}
} assistant mcp add bobnetsec-hacker-bob-public-records -t streamable-http -u 'https://hackerbob.ai/mcp'
{
"mcpServers": {
"bobnetsec-hacker-bob-public-records": {
"type": "http",
"url": "https://hackerbob.ai/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 22 Sept 26 +1
- Stability: 0.97 → pass security
- 20 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.
- 18 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.
- 15 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 73 to 77. That category is still filling its 30-day observation window: 22 days of observed history at the previous scan, 23 at this one. The score rises as the window fills, whether or not the server changes.
- 13 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 67 to 70. That category is still filling its 30-day observation window: 20 days of observed history at the previous scan, 21 at this one. The score rises as the window fills, whether or not the server changes.
- 11 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 60 to 63. That category is still filling its 30-day observation window: 18 days of observed history at the previous scan, 19 at this one. The score rises as the window fills, whether or not the server changes.
- 9 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 53 to 57. That category is still filling its 30-day observation window: 16 days of observed history at the previous scan, 17 at this one. The score rises as the window fills, whether or not the server changes.
- 7 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 47 to 50. That category is still filling its 30-day observation window: 14 days of observed history at the previous scan, 15 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 23 Sept 2026 · Probed https://hackerbob.ai/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=hackerbob.ai | CN=WE1,O=Google Trust Services,C=US | 5 Aug 2026 | 3 Nov 2026 | ECDSA 256 | ECDSA-SHA256 | 4bca7d85531e9f0c0ea574d4df3a6bb0 |
| SANs: hackerbob.ai | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of hackerbob.ai. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| ai. | present | 3799 | 8 | Verified |
| hackerbob.ai. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://hackerbob.ai/mcp | Verified | 200 | |
| http (plaintext) | http://hackerbob.ai/mcp | HTTPS enforced | 301 | https://hackerbob.ai/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
begin_domain_authorization Begin domain authorization ~91
Create a DNS TXT or HTTPS-file challenge proving control of a domain. This does not run an assessment.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | Domain name only; no scheme, path, port, credentials, or wildcard. |
| idempotencyKey | string | yes | – |
| label | string | – | – |
| method | string | yes | – |
| workspaceSlug | string | yes | Workspace slug selected during agent authorization. |
No output schema declared.
No examples provided.
cancel_assessment Cancel assessment ~55
Cancel an eligible queued or running assessment and reconcile any refundable reserved credit.
| Name | Type | Req | Description |
|---|---|---|---|
| assessmentId | string | yes | – |
| idempotencyKey | string | yes | – |
| workspaceSlug | string | yes | Workspace slug selected during agent authorization. |
No output schema declared.
No examples provided.
check_domain_authorization Check domain authorization ~57
Check the previously issued DNS or HTTPS proof and update the asset authorization state.
| Name | Type | Req | Description |
|---|---|---|---|
| authorizationId | string | yes | – |
| idempotencyKey | string | yes | – |
| workspaceSlug | string | yes | Workspace slug selected during agent authorization. |
No output schema declared.
No examples provided.
get_assessment Get assessment ~49
Return one assessment, its verified asset, current run state, and any pending human approval.
| Name | Type | Req | Description |
|---|---|---|---|
| assessmentId | string | yes | – |
| workspaceSlug | string | yes | Workspace slug selected during agent authorization. |
No output schema declared.
No examples provided.
get_asset Get authorized asset ~40
Return one workspace asset and its current authorization state.
| Name | Type | Req | Description |
|---|---|---|---|
| assetId | string | yes | – |
| workspaceSlug | string | yes | Workspace slug selected during agent authorization. |
No output schema declared.
No examples provided.
get_capabilities Get Hacker Bob capabilities ~30
Return current public boundaries and, when authenticated, workspace-specific tool reachability, scopes, and role requirements.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_credit_summary Get credit summary ~37
Return available, reserved, and used assessment credits for the approved workspace.
| Name | Type | Req | Description |
|---|---|---|---|
| workspaceSlug | string | yes | Workspace slug selected during agent authorization. |
No output schema declared.
No examples provided.
get_finding Get finding ~44
Return one finding with evidence-safe lifecycle history and related asset metadata.
| Name | Type | Req | Description |
|---|---|---|---|
| findingId | string | yes | – |
| workspaceSlug | string | yes | Workspace slug selected during agent authorization. |
No output schema declared.
No examples provided.
get_my_account Get my Hacker Bob account ~22
Return the authenticated account and the workspace bound to this agent connection.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_public_cve_record Get one public CVE record ~60
Return one cleared Hacker Bob CVE record by identifier, including its open-source project, publication status, and upstream public record URL when available.
| Name | Type | Req | Description |
|---|---|---|---|
| recordId | string | yes | CVE identifier such as CVE-2026-47747. |
No output schema declared.
No examples provided.
get_report Get released report ~51
Return one released, non-revoked workspace report. Pending review material and access credentials are never returned.
| Name | Type | Req | Description |
|---|---|---|---|
| reportId | string | yes | – |
| workspaceSlug | string | yes | Workspace slug selected during agent authorization. |
No output schema declared.
No examples provided.
get_workspace Get workspace ~31
Return the approved workspace and current membership role.
| Name | Type | Req | Description |
|---|---|---|---|
| workspaceSlug | string | yes | Workspace slug selected during agent authorization. |
No output schema declared.
No examples provided.
launch_assessment Submit approved assessment ~69
Consume a recent human approval and submit the immutable assessment to Hacker Bob's managed queue. The target is resolved only from the stored verified asset.
| Name | Type | Req | Description |
|---|---|---|---|
| assessmentId | string | yes | – |
| idempotencyKey | string | yes | – |
| workspaceSlug | string | yes | Workspace slug selected during agent authorization. |
No output schema declared.
No examples provided.
list_assessments List assessments ~43
List assessments and current run states in the approved workspace.
| Name | Type | Req | Description |
|---|---|---|---|
| includeArchived | boolean | – | – |
| workspaceSlug | string | yes | Workspace slug selected during agent authorization. |
No output schema declared.
No examples provided.
list_assets List authorized assets ~51
List workspace assets and current ownership-authorization state without contacting a target.
| Name | Type | Req | Description |
|---|---|---|---|
| includeArchived | boolean | – | Include archived assets. Defaults to false. |
| workspaceSlug | string | yes | Workspace slug selected during agent authorization. |
No output schema declared.
No examples provided.
list_audit_events List audit events ~69
List recent workspace audit events with optional actor, action, and time filters.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | – | – |
| actor | string | – | – |
| fromAt | number | – | – |
| toAt | number | – | – |
| workspaceSlug | string | yes | Workspace slug selected during agent authorization. |
No output schema declared.
No examples provided.
list_findings List findings ~55
List workspace findings with optional lifecycle and severity filters.
| Name | Type | Req | Description |
|---|---|---|---|
| assetId | string | – | – |
| severity | string | – | – |
| status | string | – | – |
| workspaceSlug | string | yes | Workspace slug selected during agent authorization. |
No output schema declared.
No examples provided.
list_public_cve_records List public CVE records ~92
List cleared public Hacker Bob Common Vulnerabilities and Exposures records with cursor pagination and optional project or publication-status filters.
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | Opaque cursor returned by a previous list call. |
| limit | integer | – | Maximum records to return. Defaults to 20. |
| project | string | – | Exact open-source project name to include. |
| status | string | – | Publication status to include. |
No output schema declared.
No examples provided.
list_reports List released reports ~34
List non-revoked reports released to the approved workspace.
| Name | Type | Req | Description |
|---|---|---|---|
| workspaceSlug | string | yes | Workspace slug selected during agent authorization. |
No output schema declared.
No examples provided.
list_workspaces List my workspaces ~30
List active Hacker Bob workspaces available to the authenticated account. The connection remains bound to its approved workspace.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
prepare_assessment Prepare assessment ~92
Create an immutable assessment for a verified stored asset and return a browser approval URL. This never contacts the target.
| Name | Type | Req | Description |
|---|---|---|---|
| assetId | string | yes | – |
| boundaries | string | – | – |
| coverage | object | yes | – |
| depth | string | yes | – |
| idempotencyKey | string | yes | – |
| interactionPolicy | string | yes | – |
| workspaceSlug | string | yes | Workspace slug selected during agent authorization. |
No output schema declared.
No examples provided.
search_public_cve_records Search public CVE records ~76
Search cleared public Hacker Bob CVE records by CVE identifier, open-source project name, or publication status without contacting any assessment target.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Maximum matching records to return. Defaults to 20. |
| query | string | yes | Text to match against CVE identifiers, project names, and publication status. |
No output schema declared.
No examples provided.
What is the Hacker Bob public records MCP server?
Hacker Bob public records is an MCP server listed in the public MCP registry as io.github.bobnetsec/hacker-bob-public-records. Read-only public CVE records, capability metadata, and agent instructions from Hacker Bob. This page covers its hosted endpoint (https://hackerbob.ai/mcp).
Is the Hacker Bob public records MCP server safe to use?
Hacker Bob public records scores 79 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Hacker Bob public records MCP server expose?
Hacker Bob public records exposes 22 tools: list_public_cve_records, get_public_cve_record, search_public_cve_records, get_capabilities, get_my_account, and 17 more. Their descriptions and schemas cost roughly 1,178 tokens of context every time the server is loaded.
Does the Hacker Bob public records MCP server require authentication?
No. We connected to Hacker Bob public records without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the Hacker Bob public records MCP server still maintained?
Hacker Bob public records is still listed as active in the MCP registry. We last reached this channel on 23 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.