Bug Bounty Intelligence is answering right now. Last checked 10 min ago. Last commit 1 Nov 2026.
AI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates.
What the code does
We read the source, 22 h ago · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
const poort = spawnSync(process.execPath, [join(HERE, 'bug-intel-benchmark.mjs')], { env: { ...process.env, BUG_INTEL_DATA_DIR: DATA }, encoding: 'utf8' })
const table = JSON.parse(fs.readFileSync(path.join(dir, 'table-' + run + '.json'), 'utf8'))
await fetch(`https://api.telegram.org/bot${TEL_TOKEN}/sendMessage`, {
import { readFileSync, appendFileSync, mkdirSync, existsSync, readdirSync, statSync, lstatSync } from 'node:fs'
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
This code can reach further than it looks
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Connect this server
Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 10 min ago.
claude mcp add bug-bounty-intelligence-mcp --transport http https://wazir-x402.duckdns.org/api/bug-intelhttps://wazir-x402.duckdns.org/api/bug-intel[mcp_servers.bug-bounty-intelligence-mcp]
url = "https://wazir-x402.duckdns.org/api/bug-intel"{
"mcpServers": {
"bug-bounty-intelligence-mcp": {
"url": "https://wazir-x402.duckdns.org/api/bug-intel"
}
}
}{
"servers": {
"bug-bounty-intelligence-mcp": {
"type": "http",
"url": "https://wazir-x402.duckdns.org/api/bug-intel"
}
}
}This endpoint answered with a payment challenge. The server is running, but it charges for calls rather than handing out access.
Endpoints
| URL | Transport | State | Latency | Checked |
|---|---|---|---|---|
| https://wazir-x402.duckdns.org/api/bug-intel | streamable-http | paid | 297 ms | 10 min ago |
Alternatives to Bug Bounty Intelligence
same job, measured the same wayFree open dataset of compliance, security and risk AI agents and audit firms. Read-only search.
Bundle of secret-scanner, dependency-auditor, ssl-inspector, and dns-intelligence
Enterprise code intelligence for M&A, security audits, and tech debt. Hosted server with 200k free.
Read-only CVE intelligence, remediation playbooks, and agent setup guides. Not a scanner.
Security intelligence via x402 on Base. CVE lookup, IP reputation, secret scanning.
Security tools for AI agents: scan MCP servers, validate HDP delegation chains, audit releases.
MCP server for ALTR data security: databases, tags, policies, classification, access, audits
Offline security scanning for AI-generated code: seven open-source scanners in one MCP server.
Bug Bounty Intelligence — questions
Answers built from our own checks of this server.