Hacker Bob public records

by bobnetsec · remote · no sign-in to list tools · v1.0.0 · published by GitHub user bobnetsec

Read-only public CVE records, capability metadata, and agent instructions from Hacker Bob.

Deletes · 2Changes · 3

Compare Registry entry

22 tools: 2 can delete or cancel things, 3 change things and 17 only read.

Scanned Oct 21, 2026

Deletes or cancels2Claude Code: deny: see these tools
Can't be undone0Claude Code: ask
Changes things3Claude Code: ask: see these tools
Only reads17Claude Code: allow: see these tools

2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http hacker-bob-public-records https://hackerbob.ai/mcp

Findings

Matches of fixed checks, with the text they matched.

2 info

Infobegin_domain_authorization
The input schema at properties.domain.description mentions "credentials".
Matched text
inputSchema.properties.domain.description: "...omain name only; no scheme, path, port, credentials, or wildcard."
What this check looks for
Infoget_report
The description mentions "credentials".
Matched text
description: "...ort. Pending review material and access credentials are never returned."
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

22 tools

Deletes or cancels 2Removes, cancels or revokes something.Claude Code: deny

cancel_assessmentCancel an eligible queued or running assessment and reconcile any refundable reserved credit.No findings
Why it is in this group
- The name "cancel_assessment" says "cancel": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Cancel an eligible queued or running assessment and reconcile any refundable reserved credit.
Annotations the server declares
- title: Cancel assessment
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
launch_assessmentConsume a recent human approval and submit the immutable assessment to Hacker Bob's managed queue.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Consume a recent human approval and submit the immutable assessment to Hacker Bob's managed queue. The target is resolved only from the stored verified asset.
Annotations the server declares
- title: Submit approved assessment
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true

Changes things 3Creates or changes something that can be changed back.Claude Code: ask

begin_domain_authorizationCreate a DNS TXT or HTTPS-file challenge proving control of a domain.1 finding
Why it is in this group
- The description's first verb is "create": a word for a change.
Findings
- Info
  The input schema at properties.domain.description mentions "credentials".
  Matched text
  inputSchema.properties.domain.description: "...omain name only; no scheme, path, port, credentials, or wildcard."
  What this check looks for
Description, as the server wrote it
Create a DNS TXT or HTTPS-file challenge proving control of a domain. This does not run an assessment.
Annotations the server declares
- title: Begin domain authorization
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
check_domain_authorizationCheck the previously issued DNS or HTTPS proof and update the asset authorization state.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Check the previously issued DNS or HTTPS proof and update the asset authorization state.
Annotations the server declares
- title: Check domain authorization
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
prepare_assessmentCreate an immutable assessment for a verified stored asset and return a browser approval URL.No findings
Why it is in this group
- The description's first verb is "create": a word for a change.
Description, as the server wrote it
Create an immutable assessment for a verified stored asset and return a browser approval URL. This never contacts the target.
Annotations the server declares
- title: Prepare assessment
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

Only reads 17Looks things up and changes nothing.Claude Code: allow

get_assessmentReturn one assessment, its verified asset, current run state, and any pending human approval.No findings
Why it is in this group
- The name "get_assessment" says "get": a word for reading.
Description, as the server wrote it
Return one assessment, its verified asset, current run state, and any pending human approval.
Annotations the server declares
- title: Get assessment
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_assetReturn one workspace asset and its current authorization state.No findings
Why it is in this group
- The name "get_asset" says "get": a word for reading.
Description, as the server wrote it
Return one workspace asset and its current authorization state.
Annotations the server declares
- title: Get authorized asset
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_capabilitiesReturn current public boundaries and, when authenticated, workspace-specific tool reachability, scopes, and role requirements.No findings
Why it is in this group
- The name "get_capabilities" says "get": a word for reading.
Description, as the server wrote it
Return current public boundaries and, when authenticated, workspace-specific tool reachability, scopes, and role requirements.
Annotations the server declares
- title: Get Hacker Bob capabilities
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_credit_summaryReturn available, reserved, and used assessment credits for the approved workspace.No findings
Why it is in this group
- The name "get_credit_summary" says "get": a word for reading.
Description, as the server wrote it
Return available, reserved, and used assessment credits for the approved workspace.
Annotations the server declares
- title: Get credit summary
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_findingReturn one finding with evidence-safe lifecycle history and related asset metadata.No findings
Why it is in this group
- The name "get_finding" says "get": a word for reading.
Description, as the server wrote it
Return one finding with evidence-safe lifecycle history and related asset metadata.
Annotations the server declares
- title: Get finding
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_my_accountReturn the authenticated account and the workspace bound to this agent connection.No findings
Why it is in this group
- The name "get_my_account" says "get": a word for reading.
Description, as the server wrote it
Return the authenticated account and the workspace bound to this agent connection.
Annotations the server declares
- title: Get my Hacker Bob account
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_public_cve_recordReturn one cleared Hacker Bob CVE record by identifier, including its open-source project, publication status, and upstream public record URL when available.No findings
Why it is in this group
- The name "get_public_cve_record" says "get": a word for reading.
Description, as the server wrote it
Return one cleared Hacker Bob CVE record by identifier, including its open-source project, publication status, and upstream public record URL when available.
Annotations the server declares
- title: Get one public CVE record
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_reportReturn one released, non-revoked workspace report.1 finding
Why it is in this group
- The name "get_report" says "get": a word for reading.
Findings
- Info
  The description mentions "credentials".
  Matched text
  description: "...ort. Pending review material and access credentials are never returned."
  What this check looks for
Description, as the server wrote it
Return one released, non-revoked workspace report. Pending review material and access credentials are never returned.
Annotations the server declares
- title: Get released report
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_workspaceReturn the approved workspace and current membership role.No findings
Why it is in this group
- The name "get_workspace" says "get": a word for reading.
Description, as the server wrote it
Return the approved workspace and current membership role.
Annotations the server declares
- title: Get workspace
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_assessmentsList assessments and current run states in the approved workspace.No findings
Why it is in this group
- The name "list_assessments" says "list": a word for reading.
Description, as the server wrote it
List assessments and current run states in the approved workspace.
Annotations the server declares
- title: List assessments
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_assetsList workspace assets and current ownership-authorization state without contacting a target.No findings
Why it is in this group
- The name "list_assets" says "list": a word for reading.
Description, as the server wrote it
List workspace assets and current ownership-authorization state without contacting a target.
Annotations the server declares
- title: List authorized assets
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_audit_eventsList recent workspace audit events with optional actor, action, and time filters.No findings
Why it is in this group
- The name "list_audit_events" says "list": a word for reading.
Description, as the server wrote it
List recent workspace audit events with optional actor, action, and time filters.
Annotations the server declares
- title: List audit events
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_findingsList workspace findings with optional lifecycle and severity filters.No findings
Why it is in this group
- The name "list_findings" says "list": a word for reading.
Description, as the server wrote it
List workspace findings with optional lifecycle and severity filters.
Annotations the server declares
- title: List findings
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_public_cve_recordsList cleared public Hacker Bob Common Vulnerabilities and Exposures records with cursor pagination and optional project or publication-status filters.No findings
Why it is in this group
- The name "list_public_cve_records" says "list": a word for reading.
Description, as the server wrote it
List cleared public Hacker Bob Common Vulnerabilities and Exposures records with cursor pagination and optional project or publication-status filters.
Annotations the server declares
- title: List public CVE records
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_reportsList non-revoked reports released to the approved workspace.No findings
Why it is in this group
- The name "list_reports" says "list": a word for reading.
Description, as the server wrote it
List non-revoked reports released to the approved workspace.
Annotations the server declares
- title: List released reports
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_workspacesList active Hacker Bob workspaces available to the authenticated account.No findings
Why it is in this group
- The name "list_workspaces" says "list": a word for reading.
Description, as the server wrote it
List active Hacker Bob workspaces available to the authenticated account. The connection remains bound to its approved workspace.
Annotations the server declares
- title: List my workspaces
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
search_public_cve_recordsSearch cleared public Hacker Bob CVE records by CVE identifier, open-source project name, or publication status without contacting any assessment target.No findings
Why it is in this group
- The name "search_public_cve_records" says "search": a word for reading.
Description, as the server wrote it
Search cleared public Hacker Bob CVE records by CVE identifier, open-source project name, or publication status without contacting any assessment target.
Annotations the server declares
- title: Search public CVE records
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http hacker-bob-public-records https://hackerbob.ai/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__hacker-bob-public-records__list_public_cve_records",
      "mcp__hacker-bob-public-records__get_public_cve_record",
      "mcp__hacker-bob-public-records__search_public_cve_records",
      "mcp__hacker-bob-public-records__get_capabilities",
      "mcp__hacker-bob-public-records__get_my_account",
      "mcp__hacker-bob-public-records__list_workspaces",
      "mcp__hacker-bob-public-records__get_workspace",
      "mcp__hacker-bob-public-records__list_assets",
      "mcp__hacker-bob-public-records__get_asset",
      "mcp__hacker-bob-public-records__list_assessments",
      "mcp__hacker-bob-public-records__get_assessment",
      "mcp__hacker-bob-public-records__list_findings",
      "mcp__hacker-bob-public-records__get_finding",
      "mcp__hacker-bob-public-records__list_reports",
      "mcp__hacker-bob-public-records__get_report",
      "mcp__hacker-bob-public-records__get_credit_summary",
      "mcp__hacker-bob-public-records__list_audit_events"
    ],
    "ask": [
      "mcp__hacker-bob-public-records__begin_domain_authorization",
      "mcp__hacker-bob-public-records__check_domain_authorization",
      "mcp__hacker-bob-public-records__prepare_assessment"
    ],
    "deny": [
      "mcp__hacker-bob-public-records__launch_assessment",
      "mcp__hacker-bob-public-records__cancel_assessment"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as hacker-bob-public-records. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.bobnetsec/hacker-bob-public-records/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

5 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 21, 2026, 18:24 UTC.

For agents: Markdown · JSON · report this listing