MCP MeasureMCP Measure

índice observado

Hacker Bob public records

Read-only public CVE records, capability metadata, and agent instructions from Hacker Bob.

¿Debería usar esto?

Calidad y seguridad

B
Calidad de la descripción
98%
Integridad del esquema
83%
Calidad de los nombres
97%
Riesgo de envenenamiento
0%
Coincidencia de permisos
100%
Cumplimiento del protocolo
100%

Hallazgos (7)

  • HIGHTool poisoning patterns detected
  • LOWTool 'get_capabilities' description lacks action verben get_capabilities
  • INFOTool description contains placeholder or incomplete texten list_public_cve_records
  • INFOTool description contains placeholder or incomplete texten get_public_cve_record
  • INFOTool description contains placeholder or incomplete texten search_public_cve_records
  • INFOTool description contains placeholder or incomplete texten list_workspaces
  • INFOTool description contains placeholder or incomplete texten launch_assessment

Basado en el análisis automatizado de las definiciones de herramientas y el cumplimiento del protocolo.

Costo de contexto

~3,309Tokens (definiciones de herramientas)
~1.0 KBTamaño de respuesta típico
Impacto significativo en la atención (2.59% del contexto de 128k)

Este es el número aproximado de tokens que se consumen cada vez que las herramientas del servidor se cargan en el contexto de un modelo. Los recuentos más altos reducen la atención disponible para otras tareas.

Instalar

Instalación con un clic

Agrega esto a tu archivo `claude_desktop_config.json`:

{
  "mcpServers": {
    "hacker-bob-public-records": {
      "url": "https://hackerbob.ai/mcp"
    }
  }
}

Puntos de conexión remotos

https://hackerbob.ai/mcpstreamable-http

Qué puede hacer

Inventario de herramientas

Herramientas (22)

🟢 Solo lectura🟡 Escritura🔴 Eliminación⚪ Desconocido
🟢list_public_cve_records(limit, cursor, project, status)

List cleared public Hacker Bob Common Vulnerabilities and Exposures records with cursor pagination and optional project or publication-status filters.

Esquema de entrada

{
  "type": "object",
  "properties": {
    "limit": {
      "type": "integer",
      "minimum": 1,
      "maximum": 100,
      "description": "Maximum records to return. Defaults to 20."
    },
    "cursor": {
      "type": "string",
      "description": "Opaque cursor returned by a previous list call."
    },
    "project": {
      "type": "string",
      "description": "Exact open-source project name to include."
    },
    "status": {
      "type": "string",
      "enum": [
        "public",
        "assigned-no-public-record"
      ],
      "description": "Publication status to include."
    }
  },
  "required": [],
  "additionalProperties": false
}
🟢get_public_cve_record(recordId)

Return one cleared Hacker Bob CVE record by identifier, including its open-source project, publication status, and upstream public record URL when available.

Esquema de entrada

{
  "type": "object",
  "properties": {
    "recordId": {
      "type": "string",
      "pattern": "^CVE-[0-9]{4}-[0-9]+$",
      "description": "CVE identifier such as CVE-2026-47747."
    }
  },
  "required": [
    "recordId"
  ],
  "additionalProperties": false
}
🟢search_public_cve_records(query, limit)

Search cleared public Hacker Bob CVE records by CVE identifier, open-source project name, or publication status without contacting any assessment target.

Esquema de entrada

{
  "type": "object",
  "properties": {
    "query": {
      "type": "string",
      "minLength": 1,
      "description": "Text to match against CVE identifiers, project names, and publication status."
    },
    "limit": {
      "type": "integer",
      "minimum": 1,
      "maximum": 50,
      "description": "Maximum matching records to return. Defaults to 20."
    }
  },
  "required": [
    "query"
  ],
  "additionalProperties": false
}
🟢get_capabilities

Return current public boundaries and, when authenticated, workspace-specific tool reachability, scopes, and role requirements.

Esquema de entrada

{
  "type": "object",
  "properties": {},
  "required": [],
  "additionalProperties": false
}
🟢get_my_account

Return the authenticated account and the workspace bound to this agent connection.

Esquema de entrada

{
  "type": "object",
  "properties": {},
  "required": [],
  "additionalProperties": false
}
🟢list_workspaces

List active Hacker Bob workspaces available to the authenticated account. The connection remains bound to its approved workspace.

Esquema de entrada

{
  "type": "object",
  "properties": {},
  "required": [],
  "additionalProperties": false
}
🟢get_workspace(workspaceSlug)

Return the approved workspace and current membership role.

Esquema de entrada

{
  "type": "object",
  "properties": {
    "workspaceSlug": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80,
      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
      "description": "Workspace slug selected during agent authorization."
    }
  },
  "required": [
    "workspaceSlug"
  ],
  "additionalProperties": false
}
🟢list_assets(workspaceSlug, includeArchived)

List workspace assets and current ownership-authorization state without contacting a target.

Esquema de entrada

{
  "type": "object",
  "properties": {
    "workspaceSlug": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80,
      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
      "description": "Workspace slug selected during agent authorization."
    },
    "includeArchived": {
      "type": "boolean",
      "description": "Include archived assets. Defaults to false."
    }
  },
  "required": [
    "workspaceSlug"
  ],
  "additionalProperties": false
}
🟢get_asset(workspaceSlug, assetId)

Return one workspace asset and its current authorization state.

Esquema de entrada

{
  "type": "object",
  "properties": {
    "workspaceSlug": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80,
      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
      "description": "Workspace slug selected during agent authorization."
    },
    "assetId": {
      "type": "string",
      "minLength": 1,
      "maxLength": 128
    }
  },
  "required": [
    "workspaceSlug",
    "assetId"
  ],
  "additionalProperties": false
}
🟡begin_domain_authorization(workspaceSlug, domain, label, method, idempotencyKey)

Create a DNS TXT or HTTPS-file challenge proving control of a domain. This does not run an assessment.

Esquema de entrada

{
  "type": "object",
  "properties": {
    "workspaceSlug": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80,
      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
      "description": "Workspace slug selected during agent authorization."
    },
    "domain": {
      "type": "string",
      "minLength": 1,
      "maxLength": 253,
      "description": "Domain name only; no scheme, path, port, credentials, or wildcard."
    },
    "label": {
      "type": "string",
      "minLength": 1,
      "maxLength": 120
    },
    "method": {
      "type": "string",
      "enum": [
        "dns_txt",
        "http_file"
      ]
    },
    "idempotencyKey": {
      "type": "string",
      "minLength": 8,
      "maxLength": 128
    }
  },
  "required": [
    "workspaceSlug",
    "domain",
    "method",
    "idempotencyKey"
  ],
  "additionalProperties": false
}
🟡check_domain_authorization(workspaceSlug, authorizationId, idempotencyKey)

Check the previously issued DNS or HTTPS proof and update the asset authorization state.

Esquema de entrada

{
  "type": "object",
  "properties": {
    "workspaceSlug": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80,
      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
      "description": "Workspace slug selected during agent authorization."
    },
    "authorizationId": {
      "type": "string",
      "minLength": 1,
      "maxLength": 128
    },
    "idempotencyKey": {
      "type": "string",
      "minLength": 8,
      "maxLength": 128
    }
  },
  "required": [
    "workspaceSlug",
    "authorizationId",
    "idempotencyKey"
  ],
  "additionalProperties": false
}
🟢list_assessments(workspaceSlug, includeArchived)

List assessments and current run states in the approved workspace.

Esquema de entrada

{
  "type": "object",
  "properties": {
    "workspaceSlug": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80,
      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
      "description": "Workspace slug selected during agent authorization."
    },
    "includeArchived": {
      "type": "boolean"
    }
  },
  "required": [
    "workspaceSlug"
  ],
  "additionalProperties": false
}
🟢get_assessment(workspaceSlug, assessmentId)

Return one assessment, its verified asset, current run state, and any pending human approval.

Esquema de entrada

{
  "type": "object",
  "properties": {
    "workspaceSlug": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80,
      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
      "description": "Workspace slug selected during agent authorization."
    },
    "assessmentId": {
      "type": "string",
      "minLength": 1,
      "maxLength": 128
    }
  },
  "required": [
    "workspaceSlug",
    "assessmentId"
  ],
  "additionalProperties": false
}
🟡prepare_assessment(workspaceSlug, assetId, depth, coverage, interactionPolicy, ...)

Create an immutable assessment for a verified stored asset and return a browser approval URL. This never contacts the target.

Esquema de entrada

{
  "type": "object",
  "properties": {
    "workspaceSlug": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80,
      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
      "description": "Workspace slug selected during agent authorization."
    },
    "assetId": {
      "type": "string",
      "minLength": 1,
      "maxLength": 128
    },
    "depth": {
      "type": "string",
      "enum": [
        "standard",
        "deep"
      ]
    },
    "coverage": {
      "type": "object",
      "properties": {
        "mode": {
          "type": "string",
          "enum": [
            "all",
            "exclude",
            "include"
          ]
        },
        "rules": {
          "type": "array",
          "items": {
            "type": "string",
            "minLength": 1,
            "maxLength": 240
          },
          "maxItems": 100
        }
      },
      "required": [
        "mode",
        "rules"
      ],
      "additionalProperties": false
    },
    "interactionPolicy": {
      "type": "string",
      "enum": [
        "safe",
        "stateful"
      ]
    },
    "boundaries": {
      "type": "string",
      "maxLength": 1000
    },
    "idempotencyKey": {
      "type": "string",
      "minLength": 8,
      "maxLength": 128
    }
  },
  "required": [
    "workspaceSlug",
    "assetId",
    "depth",
    "coverage",
    "interactionPolicy",
    "idempotencyKey"
  ],
  "additionalProperties": false
}
🔴launch_assessment(workspaceSlug, assessmentId, idempotencyKey)

Consume a recent human approval and submit the immutable assessment to Hacker Bob's managed queue. The target is resolved only from the stored verified asset.

Esquema de entrada

{
  "type": "object",
  "properties": {
    "workspaceSlug": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80,
      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
      "description": "Workspace slug selected during agent authorization."
    },
    "assessmentId": {
      "type": "string",
      "minLength": 1,
      "maxLength": 128
    },
    "idempotencyKey": {
      "type": "string",
      "minLength": 8,
      "maxLength": 128
    }
  },
  "required": [
    "workspaceSlug",
    "assessmentId",
    "idempotencyKey"
  ],
  "additionalProperties": false
}
🔴cancel_assessment(workspaceSlug, assessmentId, idempotencyKey)

Cancel an eligible queued or running assessment and reconcile any refundable reserved credit.

Esquema de entrada

{
  "type": "object",
  "properties": {
    "workspaceSlug": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80,
      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
      "description": "Workspace slug selected during agent authorization."
    },
    "assessmentId": {
      "type": "string",
      "minLength": 1,
      "maxLength": 128
    },
    "idempotencyKey": {
      "type": "string",
      "minLength": 8,
      "maxLength": 128
    }
  },
  "required": [
    "workspaceSlug",
    "assessmentId",
    "idempotencyKey"
  ],
  "additionalProperties": false
}
🟢list_findings(workspaceSlug, status, severity, assetId)

List workspace findings with optional lifecycle and severity filters.

Esquema de entrada

{
  "type": "object",
  "properties": {
    "workspaceSlug": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80,
      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
      "description": "Workspace slug selected during agent authorization."
    },
    "status": {
      "type": "string",
      "maxLength": 40
    },
    "severity": {
      "type": "string",
      "enum": [
        "critical",
        "high",
        "medium",
        "low"
      ]
    },
    "assetId": {
      "type": "string",
      "minLength": 1,
      "maxLength": 128
    }
  },
  "required": [
    "workspaceSlug"
  ],
  "additionalProperties": false
}
🟢get_finding(workspaceSlug, findingId)

Return one finding with evidence-safe lifecycle history and related asset metadata.

Esquema de entrada

{
  "type": "object",
  "properties": {
    "workspaceSlug": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80,
      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
      "description": "Workspace slug selected during agent authorization."
    },
    "findingId": {
      "type": "string",
      "minLength": 1,
      "maxLength": 128
    }
  },
  "required": [
    "workspaceSlug",
    "findingId"
  ],
  "additionalProperties": false
}
🟢list_reports(workspaceSlug)

List non-revoked reports released to the approved workspace.

Esquema de entrada

{
  "type": "object",
  "properties": {
    "workspaceSlug": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80,
      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
      "description": "Workspace slug selected during agent authorization."
    }
  },
  "required": [
    "workspaceSlug"
  ],
  "additionalProperties": false
}
🟢get_report(workspaceSlug, reportId)

Return one released, non-revoked workspace report. Pending review material and access credentials are never returned.

Esquema de entrada

{
  "type": "object",
  "properties": {
    "workspaceSlug": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80,
      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
      "description": "Workspace slug selected during agent authorization."
    },
    "reportId": {
      "type": "string",
      "minLength": 1,
      "maxLength": 128
    }
  },
  "required": [
    "workspaceSlug",
    "reportId"
  ],
  "additionalProperties": false
}
🟢get_credit_summary(workspaceSlug)

Return available, reserved, and used assessment credits for the approved workspace.

Esquema de entrada

{
  "type": "object",
  "properties": {
    "workspaceSlug": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80,
      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
      "description": "Workspace slug selected during agent authorization."
    }
  },
  "required": [
    "workspaceSlug"
  ],
  "additionalProperties": false
}
🟢list_audit_events(workspaceSlug, actor, action, fromAt, toAt)

List recent workspace audit events with optional actor, action, and time filters.

Esquema de entrada

{
  "type": "object",
  "properties": {
    "workspaceSlug": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80,
      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
      "description": "Workspace slug selected during agent authorization."
    },
    "actor": {
      "type": "string",
      "maxLength": 254
    },
    "action": {
      "type": "string",
      "maxLength": 80
    },
    "fromAt": {
      "type": "number",
      "minimum": 0
    },
    "toAt": {
      "type": "number",
      "minimum": 0
    }
  },
  "required": [
    "workspaceSlug"
  ],
  "additionalProperties": false
}

Comunidad

Califica este servidor

Evidencia

Observaciones recientes

verificadoversión no registrada22 herramientas
verificadoversión no registrada22 herramientas
verificadoversión no registrada22 herramientas