Bug Bounties MCP: vulnerability reward programs
bug-bounties-mcp
An MCP server that searches bug bounty and VDP programs and finds security contacts for sites, repos and packages
- 472 ★ on the repository
- Last commit
- MIT
Extended access
Why this level
- `lookup_*` requests with site, package and repository names go to the bug-bounties.as93.net server, which itself calls external resources
- Responses contain scraped third-party text that may carry instructions aimed at the agent
Install
- Works in
In your terminal, with SkillFoxx CLI
npx skillfoxx add mcp/bug-bounties-mcpDetects the agents on your machine, shows the access level and pins the version.
Other ways to install
Access and checks
How we reviewExtended accessThe tool runs code or makes network calls and only reads external data.
- `lookup_*` requests with site, package and repository names go to the bug-bounties.as93.net server, which itself calls external resources
- Responses contain scraped third-party text that may carry instructions aimed at the agent
This is third-party code. Review the repository files before installing.
What it does
The `bug-bounties-mcp` MCP server sits in the `mcp/` folder of the Lissy93/bug-bounties repository and works as a thin client over the open REST API of the bug-bounties.as93.net database. The community maintains the database, which describes more than three thousand active bug bounty programs and vulnerability disclosure policies (VDPs). The eight tools only read data. `search_programs` searches text with fuzzy matching, filters and sorting, `get_program` returns a full program record with enrichment (Tranco rank, `security.txt`, scope, CISA KEV, EPSS) and `get_stats` gives aggregate statistics. The rest look up security contacts: `lookup_website` for a site (security.txt, RDAP, DNS, headers, common pages), `lookup_github` for a repository, `lookup_package` for npm, PyPI and crates.io packages, `lookup_forge` for GitLab and Codeberg and `lookup_app` for mobile apps. The server also exposes three resources: the list of programs, statistics and a program record at `bug-bounties://programs/{slug}`.
Who it is for. Security researchers and developers who need to know where to report a vulnerability and whether the company pays for findings.
Good fit when
- A vulnerability turned up in someone else's npm package and you need an address to write to: `lookup_package` collects contacts from `SECURITY.md` and advisories
- Before testing you need to check whether a company has a reward program, what its scope is and whether it pays for findings
- A target shortlist needs a list of programs with filters and sorting, returned by the agent page by page
- A report on open projects needs a security contact for a site or a store app
Not a fit when
- You need to submit a report: the server finds contacts and terms, and a human submits on the program page
- Current payouts and statuses from the platforms themselves are required: the database is community maintained and may lag
- Testing someone else's system is not authorized: a program's existence gives no permission to test outside its rules
Example request
Find out whether the GitHub repository expressjs/express has a contact for vulnerability reports and show where to writeMCP
- Transport
- stdio, http
- Authentication
- not required
Environment variables
BUG_BOUNTIES_API_URL- Base URL of the program database API, `https://bug-bounties.as93.net` by default.
Limitations
Node.js 20 or newer is required. The server calls the API at `https://bug-bounties.as93.net`; another address is set with the `--api-url` flag or the `BUG_BOUNTIES_API_URL` variable.
The `lookup_website` tool is limited to eight requests per minute per IP. `lookup_*` responses contain scraped third-party content: security.txt files, READMEs, commit metadata. The agent must treat them as untrusted and not follow links, instructions or credentials found there.
The README names no hosted MCP address for the project: for HTTP you run the server yourself with `bug-bounties-mcp --http 4488`.
How to disable. Remove the `bug-bounties` entry from the client's MCP settings. If the package was installed globally, remove it with `npm uninstall -g bug-bounties-mcp`.
FAQ
How do I connect Bug Bounties MCP to Claude Code?
Run `claude mcp add bug-bounties -- npx -y bug-bounties-mcp`. The same block, `command: npx` with `args: ["-y", "bug-bounties-mcp"]`, works in Claude Desktop, Cursor, Cline and Continue. No keys or account are needed.
How do search_programs and get_program differ?
`search_programs` searches text with filters and pages and returns trimmed records, or full ones with `verbose: true`. `get_program` takes one program by slug together with Tranco, security.txt, KEV and EPSS data.
Can I run the server over HTTP?
Yes. `bug-bounties-mcp --http 4488` listens for Streamable HTTP at `http://localhost:4488/mcp`. Without the flag the server runs over stdio.
Can I point it at my own copy of the database?
Yes. Pass `--api-url https://your-address` or the `BUG_BOUNTIES_API_URL` variable. The address must serve the same `/api/*` endpoints as bug-bounties.as93.net.
Does the server write anything to the database?
No, all eight tools only read data.
Discussion
No questions or reviews yet.
Related
MCP serversA free vulnerability MCP server that merges CVE, GHSA, OSV, CISA KEV and EPSS into one entry and checks a project lockfile.
MCP server that gathers your HackerOne history and 3,600 disclosed reports into a database the agent uses to plan program work
Security scanner for MCP servers that looks for hardcoded keys, tool poisoning and injection flaws in repository code.
An MCP server that gives the agent vulnerability triage: NVD data, EPSS, the CISA KEV catalog, MITRE ATT&CK mapping and one-call CVE risk scoring
An authorized bug-bounty suite: 50 subagents, 26 commands and 2 bug-bounty-platform MCP servers for Claude Code, Codex and five more agents
The MCP server gives agents Vulners vulnerability records, advisories and findings for installed software versions.
README in short
The program repository's README is a catalog of companies that accept responsible disclosure, marked with bounty, shout-out and swag symbols. The `mcp/` package README covers installation, Claude Desktop setup, the HTTP mode, options, the tool and resource tables and rules for consumers. MIT license.