# Hacker Bob public records (remote · hackerbob.ai)

Read-only public CVE records, capability metadata, and agent instructions from Hacker Bob.

- Trust score: 79/100 (medium)
- Change this week: +3
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-09-24

> **Recent critical change**: Authorization (2026-09-04). See the changelog below before you install this server.

## Components

- remote · `hackerbob.ai`: 79/100 (this document), [markdown](https://verifymcp.io/servers/bobnetsec-hacker-bob-public-records/hackerbob.md), [page](https://verifymcp.io/servers/bobnetsec-hacker-bob-public-records/hackerbob)

## Channel facts

- Endpoint: `https://hackerbob.ai/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.0.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-09-24.

- **Endpoint Security**: 57/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation check failed: no authorisation is required to call this server, and it exposes a tool marked destructive (launch_assessment).
  - HTTPS is enforced; there's no plaintext access path.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 85/100
  - 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).
  - AI-judged instruction clarity (good).
  - Tool/resource definitions use about 1280 tokens (~51/item across 25 items; 22 tools + 3 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 100/100
  - No destabilizing schema changes in the last 30 days.
- **Tool Coverage**: 83/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 48% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - We read all 22 captured tool definition(s), and no name or description among them implies an irreversible operation.
  - An AI judge read all 24 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### How do I install the Hacker Bob public records MCP server?

Hacker Bob public records is a hosted endpoint at https://hackerbob.ai/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http bobnetsec-hacker-bob-public-records 'https://hackerbob.ai/mcp'
```

### Cursor

```json
{
  "mcpServers": {
    "bobnetsec-hacker-bob-public-records": {
      "url": "https://hackerbob.ai/mcp"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "bobnetsec-hacker-bob-public-records": {
      "type": "http",
      "url": "https://hackerbob.ai/mcp"
    }
  }
}
```

### Codex

```toml
[mcp_servers.bobnetsec-hacker-bob-public-records]
url = "https://hackerbob.ai/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "bobnetsec-hacker-bob-public-records": {
      "type": "remote",
      "url": "https://hackerbob.ai/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add bobnetsec-hacker-bob-public-records --url 'https://hackerbob.ai/mcp' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  bobnetsec-hacker-bob-public-records:
    url: "https://hackerbob.ai/mcp"
```

### Netclaw

```json
{
  "McpServers": {
    "bobnetsec-hacker-bob-public-records": {
      "Transport": "http",
      "Url": "https://hackerbob.ai/mcp"
    }
  }
}
```

### Vellum

```bash
assistant mcp add bobnetsec-hacker-bob-public-records -t streamable-http -u 'https://hackerbob.ai/mcp'
```

### Other

```json
{
  "mcpServers": {
    "bobnetsec-hacker-bob-public-records": {
      "type": "http",
      "url": "https://hackerbob.ai/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-09-22 (score 79, +1)

- [security] Stability: 0.97 → pass

### 2026-09-20 (score 78, +1)

No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-18 (score 77, +1)

No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-15 (score 76, +1)

No change was recorded against any check on this day. Stability & Change Management went from 73 to 77. That category is still filling its 30-day observation window: 22 days of observed history at the previous scan, 23 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-13 (score 75, +1)

No change was recorded against any check on this day. Stability & Change Management went from 67 to 70. That category is still filling its 30-day observation window: 20 days of observed history at the previous scan, 21 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-11 (score 74, +1)

No change was recorded against any check on this day. Stability & Change Management went from 60 to 63. That category is still filling its 30-day observation window: 18 days of observed history at the previous scan, 19 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-09 (score 73, +1)

No change was recorded against any check on this day. Stability & Change Management went from 53 to 57. That category is still filling its 30-day observation window: 16 days of observed history at the previous scan, 17 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-07 (score 72, +1)

No change was recorded against any check on this day. Stability & Change Management went from 47 to 50. That category is still filling its 30-day observation window: 14 days of observed history at the previous scan, 15 at this one. The score rises as the window fills, whether or not the server changes.

## MCP tools (22)

### `list_public_cve_records` (~92 tokens)

List public CVE records

List cleared public Hacker Bob Common Vulnerabilities and Exposures records with cursor pagination and optional project or publication-status filters.

Input parameters:

- `cursor` (string): Opaque cursor returned by a previous list call.
- `limit` (integer): Maximum records to return. Defaults to 20.
- `project` (string): Exact open-source project name to include.
- `status` (string): Publication status to include.

### `get_public_cve_record` (~60 tokens)

Get one public CVE record

Return one cleared Hacker Bob CVE record by identifier, including its open-source project, publication status, and upstream public record URL when available.

Input parameters:

- `recordId` (string, required): CVE identifier such as CVE-2026-47747.

### `search_public_cve_records` (~76 tokens)

Search public CVE records

Search cleared public Hacker Bob CVE records by CVE identifier, open-source project name, or publication status without contacting any assessment target.

Input parameters:

- `limit` (integer): Maximum matching records to return. Defaults to 20.
- `query` (string, required): Text to match against CVE identifiers, project names, and publication status.

### `get_capabilities` (~30 tokens)

Get Hacker Bob capabilities

Return current public boundaries and, when authenticated, workspace-specific tool reachability, scopes, and role requirements.

### `get_my_account` (~22 tokens)

Get my Hacker Bob account

Return the authenticated account and the workspace bound to this agent connection.

### `list_workspaces` (~30 tokens)

List my workspaces

List active Hacker Bob workspaces available to the authenticated account. The connection remains bound to its approved workspace.

### `get_workspace` (~31 tokens)

Get workspace

Return the approved workspace and current membership role.

Input parameters:

- `workspaceSlug` (string, required): Workspace slug selected during agent authorization.

### `list_assets` (~51 tokens)

List authorized assets

List workspace assets and current ownership-authorization state without contacting a target.

Input parameters:

- `includeArchived` (boolean): Include archived assets. Defaults to false.
- `workspaceSlug` (string, required): Workspace slug selected during agent authorization.

### `get_asset` (~40 tokens)

Get authorized asset

Return one workspace asset and its current authorization state.

Input parameters:

- `assetId` (string, required)
- `workspaceSlug` (string, required): Workspace slug selected during agent authorization.

### `begin_domain_authorization` (~91 tokens)

Begin domain authorization

Create a DNS TXT or HTTPS-file challenge proving control of a domain. This does not run an assessment.

Input parameters:

- `domain` (string, required): Domain name only; no scheme, path, port, credentials, or wildcard.
- `idempotencyKey` (string, required)
- `label` (string)
- `method` (string, required)
- `workspaceSlug` (string, required): Workspace slug selected during agent authorization.

### `check_domain_authorization` (~57 tokens)

Check domain authorization

Check the previously issued DNS or HTTPS proof and update the asset authorization state.

Input parameters:

- `authorizationId` (string, required)
- `idempotencyKey` (string, required)
- `workspaceSlug` (string, required): Workspace slug selected during agent authorization.

### `list_assessments` (~43 tokens)

List assessments

List assessments and current run states in the approved workspace.

Input parameters:

- `includeArchived` (boolean)
- `workspaceSlug` (string, required): Workspace slug selected during agent authorization.

### `get_assessment` (~49 tokens)

Get assessment

Return one assessment, its verified asset, current run state, and any pending human approval.

Input parameters:

- `assessmentId` (string, required)
- `workspaceSlug` (string, required): Workspace slug selected during agent authorization.

### `prepare_assessment` (~92 tokens)

Prepare assessment

Create an immutable assessment for a verified stored asset and return a browser approval URL. This never contacts the target.

Input parameters:

- `assetId` (string, required)
- `boundaries` (string)
- `coverage` (object, required)
- `depth` (string, required)
- `idempotencyKey` (string, required)
- `interactionPolicy` (string, required)
- `workspaceSlug` (string, required): Workspace slug selected during agent authorization.

### `launch_assessment` (~69 tokens)

Submit approved assessment

Consume a recent human approval and submit the immutable assessment to Hacker Bob's managed queue. The target is resolved only from the stored verified asset.

Input parameters:

- `assessmentId` (string, required)
- `idempotencyKey` (string, required)
- `workspaceSlug` (string, required): Workspace slug selected during agent authorization.

### `cancel_assessment` (~55 tokens)

Cancel assessment

Cancel an eligible queued or running assessment and reconcile any refundable reserved credit.

Input parameters:

- `assessmentId` (string, required)
- `idempotencyKey` (string, required)
- `workspaceSlug` (string, required): Workspace slug selected during agent authorization.

### `list_findings` (~55 tokens)

List findings

List workspace findings with optional lifecycle and severity filters.

Input parameters:

- `assetId` (string)
- `severity` (string)
- `status` (string)
- `workspaceSlug` (string, required): Workspace slug selected during agent authorization.

### `get_finding` (~44 tokens)

Get finding

Return one finding with evidence-safe lifecycle history and related asset metadata.

Input parameters:

- `findingId` (string, required)
- `workspaceSlug` (string, required): Workspace slug selected during agent authorization.

### `list_reports` (~34 tokens)

List released reports

List non-revoked reports released to the approved workspace.

Input parameters:

- `workspaceSlug` (string, required): Workspace slug selected during agent authorization.

### `get_report` (~51 tokens)

Get released report

Return one released, non-revoked workspace report. Pending review material and access credentials are never returned.

Input parameters:

- `reportId` (string, required)
- `workspaceSlug` (string, required): Workspace slug selected during agent authorization.

### `get_credit_summary` (~37 tokens)

Get credit summary

Return available, reserved, and used assessment credits for the approved workspace.

Input parameters:

- `workspaceSlug` (string, required): Workspace slug selected during agent authorization.

### `list_audit_events` (~69 tokens)

List audit events

List recent workspace audit events with optional actor, action, and time filters.

Input parameters:

- `action` (string)
- `actor` (string)
- `fromAt` (number)
- `toAt` (number)
- `workspaceSlug` (string, required): Workspace slug selected during agent authorization.

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/bobnetsec-hacker-bob-public-records/hackerbob#diagnostics

## Score history

- 2026-09-24: 79
- 2026-09-23: 79
- 2026-09-22: 79
- 2026-09-21: 78
- 2026-09-20: 78
- 2026-09-19: 77
- 2026-09-18: 77
- 2026-09-17: 76
- 2026-09-16: 76
- 2026-09-15: 76
- 2026-09-14: 75
- 2026-09-13: 75
- 2026-09-12: 74
- 2026-09-11: 74
- 2026-09-10: 73
- 2026-09-09: 73
- 2026-09-08: 72
- 2026-09-07: 72
- 2026-09-06: 71
- 2026-09-05: 71
- 2026-09-04: 70
- 2026-09-03: 78
- 2026-09-02: 77
- 2026-09-01: 77
- 2026-08-31: 77
- 2026-08-30: 76
- 2026-08-29: 76
- 2026-08-28: 75
- 2026-08-27: 75
- 2026-08-26: 74

## Common questions

### What is the Hacker Bob public records MCP server?

Hacker Bob public records is an MCP server listed in the public MCP registry as io.github.bobnetsec/hacker-bob-public-records. Read-only public CVE records, capability metadata, and agent instructions from Hacker Bob. This page covers its hosted endpoint (https://hackerbob.ai/mcp).

### Is the Hacker Bob public records MCP server safe to use?

Hacker Bob public records scores 79 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the Hacker Bob public records MCP server expose?

Hacker Bob public records exposes 22 tools: list_public_cve_records, get_public_cve_record, search_public_cve_records, get_capabilities, get_my_account, and 17 more. Their descriptions and schemas cost roughly 1,178 tokens of context every time the server is loaded.

### Does the Hacker Bob public records MCP server require authentication?

No. We connected to Hacker Bob public records without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

### Is the Hacker Bob public records MCP server still maintained?

Hacker Bob public records is still listed as active in the MCP registry. We last reached this channel on 24 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://hackerbob.ai/mcp
- Repository: https://github.com/bobnetsec/www
- Website: https://hackerbob.ai/api-reference
- Changelog RSS feed: https://verifymcp.io/servers/bobnetsec-hacker-bob-public-records/hackerbob.xml
- Changelog JSON feed: https://verifymcp.io/servers/bobnetsec-hacker-bob-public-records/hackerbob.json
- HTML version of this page: https://verifymcp.io/servers/bobnetsec-hacker-bob-public-records/hackerbob