hackerone-mcp

An MCP (Model Context Protocol) server that connects Claude, Claude codex and other mcp clients to the HackerOne Hackers API.

| Tool | Description | |------|-------------| | h1_list_reports | List your reports, filterable by program, state, severity, page | | h1_get_report | Get full details of a specific report by ID | | h1_get_program_scopes | Get in-scope and out-of-scope assets for a program | | h1_get_program | Get program details (policy, bounties, response stats) | | h1_list_programs | List programs you have access to |

---

cd hackerone-mcp
npm install

1. Go to https://hackerone.com/settings/api_token/edit
2. Create a new API token
3. Note your username and the generated token

---

Edit your Claude Desktop config file:

• macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
• Windows: %APPDATA%\Claude\claude_desktop_config.json

{
  "mcpServers": {
    "hackerone": {
      "command": "node",
      "args": ["/absolute/path/to/hackerone-mcp/index.js"],
      "env": {
        "HACKERONE_USERNAME": "your_h1_username",
        "HACKERONE_API_TOKEN": "your_api_token"
      }
    }
  }
}

Restart Claude Desktop after saving.

---

Run once to add the MCP server to your Claude Code config:

claude mcp add hackerone \
  -e HACKERONE_USERNAME=your_h1_username \
  -e HACKERONE_API_TOKEN=your_api_token \
  -- node /absolute/path/to/hackerone-mcp/index.js

Or set credentials as shell environment variables first:

export HACKERONE_USERNAME=your_h1_username
export HACKERONE_API_TOKEN=your_api_token

claude mcp add hackerone -- node /absolute/path/to/hackerone-mcp/index.js

Verify it's registered:

claude mcp list

---

Pass the environment va