Hacker Bob public records
Read-only public CVE records, capability metadata, and agent instructions from Hacker Bob.
| Endpoint | https://hackerbob.ai/mcp (streamable-http) |
|---|---|
| Registry version | 1.0.0 |
| Now | 22 tools · grade C (70) · pin ts_c561f8c057495efe4f2478054a13e6c0 · protocol 2025-11-25 |
| First / last listed | 2026-10-30 01:19 UTC / 2026-10-30 01:19 UTC |
| Grade over time | 2026-10-30: C (70), 22 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: list_public_cve_records get_public_cve_record search_public_cve_records get_capabilities get_my_account list_workspaces get_workspace list_assets get_asset begin_domain_authorization check_domain_authorization list_assessments get_assessment prepare_assessment launch_assessment cancel_assessment list_findings get_finding list_reports get_report get_credit_summary list_audit_events
list_public_cve_records | List cleared public Hacker Bob Common Vulnerabilities and Exposures records with cursor pagination and optional project or publication-status filters. params: limit, cursor, project, status |
get_public_cve_record | Return one cleared Hacker Bob CVE record by identifier, including its open-source project, publication status, and upstream public record URL when available. params: recordId* |
search_public_cve_records | Search cleared public Hacker Bob CVE records by CVE identifier, open-source project name, or publication status without contacting any assessment target. params: query*, limit |
get_capabilities | Return current public boundaries and, when authenticated, workspace-specific tool reachability, scopes, and role requirements. params: none |
get_my_account | Return the authenticated account and the workspace bound to this agent connection. params: none |
list_workspaces | List active Hacker Bob workspaces available to the authenticated account. The connection remains bound to its approved workspace. params: none |
get_workspace | Return the approved workspace and current membership role. params: workspaceSlug* |
list_assets | List workspace assets and current ownership-authorization state without contacting a target. params: workspaceSlug*, includeArchived |
get_asset | Return one workspace asset and its current authorization state. params: workspaceSlug*, assetId* |
begin_domain_authorization | Create a DNS TXT or HTTPS-file challenge proving control of a domain. This does not run an assessment. params: workspaceSlug*, domain*, label, method*, idempotencyKey* |
check_domain_authorization | Check the previously issued DNS or HTTPS proof and update the asset authorization state. params: workspaceSlug*, authorizationId*, idempotencyKey* |
list_assessments | List assessments and current run states in the approved workspace. params: workspaceSlug*, includeArchived |
get_assessment | Return one assessment, its verified asset, current run state, and any pending human approval. params: workspaceSlug*, assessmentId* |
prepare_assessment | Create an immutable assessment for a verified stored asset and return a browser approval URL. This never contacts the target. params: workspaceSlug*, assetId*, depth*, coverage*, interactionPolicy*, boundaries, idempotencyKey* |
launch_assessment | Consume a recent human approval and submit the immutable assessment to Hacker Bob's managed queue. The target is resolved only from the stored verified asset. params: workspaceSlug*, assessmentId*, idempotencyKey* |
cancel_assessment | Cancel an eligible queued or running assessment and reconcile any refundable reserved credit. params: workspaceSlug*, assessmentId*, idempotencyKey* |
list_findings | List workspace findings with optional lifecycle and severity filters. params: workspaceSlug*, status, severity, assetId |
get_finding | Return one finding with evidence-safe lifecycle history and related asset metadata. params: workspaceSlug*, findingId* |
list_reports | List non-revoked reports released to the approved workspace. params: workspaceSlug* |
get_report | Return one released, non-revoked workspace report. Pending review material and access credentials are never returned. params: workspaceSlug*, reportId* |
get_credit_summary | Return available, reserved, and used assessment credits for the approved workspace. params: workspaceSlug* |
list_audit_events | List recent workspace audit events with optional actor, action, and time filters. params: workspaceSlug*, actor, action, fromAt, toAt |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.