Bug Bounty Finder - HackerOne + Bugcrowd + security.txt MCP Server

by anshumanatrey Your server? Claim it

answering

Bug Bounty Finder - HackerOne + Bugcrowd + security.txt is answering right now. Last checked 9 min ago. Last commit 24 Sep 2026.

Bug Bounty Finder - HackerOne + Bugcrowd + security.txt

Uptime history 18 days of history · worst day 95%

18 days agonow

98.9%

Uptime 24h

91 of 92 checks

—

Tools

hidden behind auth

325 ms

Response time

average over 24h

Stars

last commit 24 Sep 2026

Bug Bounty Finder - HackerOne + Bugcrowd + security.txt missed 2 checks this week

Everything else answered, so this is steady rather than shaky. We check every 15 minutes, which is how a one-off gets told apart from the start of a pattern, and how you hear about the next one within the hour instead of from your users.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 9 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add bug-bounty-finder --transport http https://mcp.apify.com/?tools=anshumanatrey/bug-bounty-finder

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "bug-bounty-finder": {
      "url": "https://mcp.apify.com/?tools=anshumanatrey/bug-bounty-finder"
    }
  }
}

~/.codex/config.toml

[mcp_servers.bug-bounty-finder]
url = "https://mcp.apify.com/?tools=anshumanatrey/bug-bounty-finder"

.cursor/mcp.json

{
  "mcpServers": {
    "bug-bounty-finder": {
      "url": "https://mcp.apify.com/?tools=anshumanatrey/bug-bounty-finder"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "bug-bounty-finder": {
      "url": "https://mcp.apify.com/?tools=anshumanatrey/bug-bounty-finder"
    }
  }
}

This endpoint answered with an authorization challenge. The server is running, but you need an API key from its owner to call it.

Endpoints

URL	Transport	State	Latency	Checked
https://mcp.apify.com/?tools=anshumanatrey/bug-bounty-finder	streamable-http	needs key	299 ms	9 min ago

Alternatives to Bug Bounty Finder - HackerOne + Bugcrowd + security.txt

same job, measured the same way

Bounty Operator

by bountyoperator

Argues against a security finding or a draft bug bounty report before you submit it.

5 tools answering

Security Mcp

by varvararatta

MCP server for Security

answering

Sourcery

by abyssbugg

Sourcery security findings: MCP server, CLI, and fix-prompt builder over the Sourcery API.

70 installs/wk local only

Sourcery

by abyssbugg-labs

Sourcery security findings: MCP server, CLI, and fix-prompt builder over the Sourcery API.

Security Feeds MCP.

Offline full-text search over the HackTricks security wiki, synced every 3 days.

71 installs/wk local only

Update Hijack Poc

by nottiboy137

PoC benign MCP server for update-hijack security research

21 installs/wk local only

DNSFilter

by wyre-ai

MCP server for DNSFilter's DNS security/filtering API.

local only

Bug Bounty Finder - HackerOne + Bugcrowd + security.txt — questions

Answers built from our own checks of this server.

Why is there no tool list for Bug Bounty Finder - HackerOne + Bugcrowd + security.txt?

The server answered our handshake with an authorization challenge, so it is running — but it will not describe its tools to an anonymous client. To see them you need to connect with your own credentials. We record it as alive, not as broken: 98.9% of checks in the last 24 hours got a reply.

Is Bug Bounty Finder - HackerOne + Bugcrowd + security.txt working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 92 checks got a reply (98.9%), average response time 325 ms. The bar chart above shows every period we have measured.

How do I connect Bug Bounty Finder - HackerOne + Bugcrowd + security.txt?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address. You will need your own key: it refuses anonymous clients.

Does Bug Bounty Finder - HackerOne + Bugcrowd + security.txt need an API key?

Yes. Every time we knock, Bug Bounty Finder - HackerOne + Bugcrowd + security.txt answers with an authorization challenge instead of its tool list — that is how we know it is running and gated rather than broken. Bring your own credentials and it will talk.

How fast is Bug Bounty Finder - HackerOne + Bugcrowd + security.txt?

It answers our handshake in 325 ms on average, which is faster than 43% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.

Is Bug Bounty Finder - HackerOne + Bugcrowd + security.txt open source?

Yes — it is published under the MIT licence, written in Python and 0 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.