MCP MeasureMCP Measure

index observed

Hacker Bob public records

Read-only public CVE records, capability metadata, and agent instructions from Hacker Bob.

Should I use this

Quality & Safety

B
Description quality
98%
Schema completeness
83%
Naming quality
97%
Poisoning risk
0%
Permission match
100%
Protocol compliance
100%

Findings (7)

  • HIGHTool poisoning patterns detected
  • LOWTool 'get_capabilities' description lacks action verbin get_capabilities
  • INFOTool description contains placeholder or incomplete textin list_public_cve_records
  • INFOTool description contains placeholder or incomplete textin get_public_cve_record
  • INFOTool description contains placeholder or incomplete textin search_public_cve_records
  • INFOTool description contains placeholder or incomplete textin list_workspaces
  • INFOTool description contains placeholder or incomplete textin launch_assessment

Based on automated analysis of tool definitions and protocol compliance.

Context Cost

~3,309Tokens (tool definitions)
~1.0 KBTypical response size
Significant attention impact (2.59% of 128k context)

This is the approximate number of tokens consumed each time the server's tools are loaded into a model's context. Higher counts reduce the attention available for other tasks.

Install

One-Click Install

Add this to your `claude_desktop_config.json` file:

{
  "mcpServers": {
    "hacker-bob-public-records": {
      "url": "https://hackerbob.ai/mcp"
    }
  }
}

Remote endpoints

https://hackerbob.ai/mcpstreamable-http

What it can do

Tool inventory

Tools (22)

🟢 Read-only🟡 Write🔴 Delete⚪ Unknown
🟢list_public_cve_records(limit, cursor, project, status)

List cleared public Hacker Bob Common Vulnerabilities and Exposures records with cursor pagination and optional project or publication-status filters.

Input Schema

{
  "type": "object",
  "properties": {
    "limit": {
      "type": "integer",
      "minimum": 1,
      "maximum": 100,
      "description": "Maximum records to return. Defaults to 20."
    },
    "cursor": {
      "type": "string",
      "description": "Opaque cursor returned by a previous list call."
    },
    "project": {
      "type": "string",
      "description": "Exact open-source project name to include."
    },
    "status": {
      "type": "string",
      "enum": [
        "public",
        "assigned-no-public-record"
      ],
      "description": "Publication status to include."
    }
  },
  "required": [],
  "additionalProperties": false
}
🟢get_public_cve_record(recordId)

Return one cleared Hacker Bob CVE record by identifier, including its open-source project, publication status, and upstream public record URL when available.

Input Schema

{
  "type": "object",
  "properties": {
    "recordId": {
      "type": "string",
      "pattern": "^CVE-[0-9]{4}-[0-9]+$",
      "description": "CVE identifier such as CVE-2026-47747."
    }
  },
  "required": [
    "recordId"
  ],
  "additionalProperties": false
}
🟢search_public_cve_records(query, limit)

Search cleared public Hacker Bob CVE records by CVE identifier, open-source project name, or publication status without contacting any assessment target.

Input Schema

{
  "type": "object",
  "properties": {
    "query": {
      "type": "string",
      "minLength": 1,
      "description": "Text to match against CVE identifiers, project names, and publication status."
    },
    "limit": {
      "type": "integer",
      "minimum": 1,
      "maximum": 50,
      "description": "Maximum matching records to return. Defaults to 20."
    }
  },
  "required": [
    "query"
  ],
  "additionalProperties": false
}
🟢get_capabilities

Return current public boundaries and, when authenticated, workspace-specific tool reachability, scopes, and role requirements.

Input Schema

{
  "type": "object",
  "properties": {},
  "required": [],
  "additionalProperties": false
}
🟢get_my_account

Return the authenticated account and the workspace bound to this agent connection.

Input Schema

{
  "type": "object",
  "properties": {},
  "required": [],
  "additionalProperties": false
}
🟢list_workspaces

List active Hacker Bob workspaces available to the authenticated account. The connection remains bound to its approved workspace.

Input Schema

{
  "type": "object",
  "properties": {},
  "required": [],
  "additionalProperties": false
}
🟢get_workspace(workspaceSlug)

Return the approved workspace and current membership role.

Input Schema

{
  "type": "object",
  "properties": {
    "workspaceSlug": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80,
      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
      "description": "Workspace slug selected during agent authorization."
    }
  },
  "required": [
    "workspaceSlug"
  ],
  "additionalProperties": false
}
🟢list_assets(workspaceSlug, includeArchived)

List workspace assets and current ownership-authorization state without contacting a target.

Input Schema

{
  "type": "object",
  "properties": {
    "workspaceSlug": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80,
      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
      "description": "Workspace slug selected during agent authorization."
    },
    "includeArchived": {
      "type": "boolean",
      "description": "Include archived assets. Defaults to false."
    }
  },
  "required": [
    "workspaceSlug"
  ],
  "additionalProperties": false
}
🟢get_asset(workspaceSlug, assetId)

Return one workspace asset and its current authorization state.

Input Schema

{
  "type": "object",
  "properties": {
    "workspaceSlug": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80,
      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
      "description": "Workspace slug selected during agent authorization."
    },
    "assetId": {
      "type": "string",
      "minLength": 1,
      "maxLength": 128
    }
  },
  "required": [
    "workspaceSlug",
    "assetId"
  ],
  "additionalProperties": false
}
🟡begin_domain_authorization(workspaceSlug, domain, label, method, idempotencyKey)

Create a DNS TXT or HTTPS-file challenge proving control of a domain. This does not run an assessment.

Input Schema

{
  "type": "object",
  "properties": {
    "workspaceSlug": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80,
      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
      "description": "Workspace slug selected during agent authorization."
    },
    "domain": {
      "type": "string",
      "minLength": 1,
      "maxLength": 253,
      "description": "Domain name only; no scheme, path, port, credentials, or wildcard."
    },
    "label": {
      "type": "string",
      "minLength": 1,
      "maxLength": 120
    },
    "method": {
      "type": "string",
      "enum": [
        "dns_txt",
        "http_file"
      ]
    },
    "idempotencyKey": {
      "type": "string",
      "minLength": 8,
      "maxLength": 128
    }
  },
  "required": [
    "workspaceSlug",
    "domain",
    "method",
    "idempotencyKey"
  ],
  "additionalProperties": false
}
🟡check_domain_authorization(workspaceSlug, authorizationId, idempotencyKey)

Check the previously issued DNS or HTTPS proof and update the asset authorization state.

Input Schema

{
  "type": "object",
  "properties": {
    "workspaceSlug": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80,
      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
      "description": "Workspace slug selected during agent authorization."
    },
    "authorizationId": {
      "type": "string",
      "minLength": 1,
      "maxLength": 128
    },
    "idempotencyKey": {
      "type": "string",
      "minLength": 8,
      "maxLength": 128
    }
  },
  "required": [
    "workspaceSlug",
    "authorizationId",
    "idempotencyKey"
  ],
  "additionalProperties": false
}
🟢list_assessments(workspaceSlug, includeArchived)

List assessments and current run states in the approved workspace.

Input Schema

{
  "type": "object",
  "properties": {
    "workspaceSlug": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80,
      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
      "description": "Workspace slug selected during agent authorization."
    },
    "includeArchived": {
      "type": "boolean"
    }
  },
  "required": [
    "workspaceSlug"
  ],
  "additionalProperties": false
}
🟢get_assessment(workspaceSlug, assessmentId)

Return one assessment, its verified asset, current run state, and any pending human approval.

Input Schema

{
  "type": "object",
  "properties": {
    "workspaceSlug": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80,
      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
      "description": "Workspace slug selected during agent authorization."
    },
    "assessmentId": {
      "type": "string",
      "minLength": 1,
      "maxLength": 128
    }
  },
  "required": [
    "workspaceSlug",
    "assessmentId"
  ],
  "additionalProperties": false
}
🟡prepare_assessment(workspaceSlug, assetId, depth, coverage, interactionPolicy, ...)

Create an immutable assessment for a verified stored asset and return a browser approval URL. This never contacts the target.

Input Schema

{
  "type": "object",
  "properties": {
    "workspaceSlug": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80,
      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
      "description": "Workspace slug selected during agent authorization."
    },
    "assetId": {
      "type": "string",
      "minLength": 1,
      "maxLength": 128
    },
    "depth": {
      "type": "string",
      "enum": [
        "standard",
        "deep"
      ]
    },
    "coverage": {
      "type": "object",
      "properties": {
        "mode": {
          "type": "string",
          "enum": [
            "all",
            "exclude",
            "include"
          ]
        },
        "rules": {
          "type": "array",
          "items": {
            "type": "string",
            "minLength": 1,
            "maxLength": 240
          },
          "maxItems": 100
        }
      },
      "required": [
        "mode",
        "rules"
      ],
      "additionalProperties": false
    },
    "interactionPolicy": {
      "type": "string",
      "enum": [
        "safe",
        "stateful"
      ]
    },
    "boundaries": {
      "type": "string",
      "maxLength": 1000
    },
    "idempotencyKey": {
      "type": "string",
      "minLength": 8,
      "maxLength": 128
    }
  },
  "required": [
    "workspaceSlug",
    "assetId",
    "depth",
    "coverage",
    "interactionPolicy",
    "idempotencyKey"
  ],
  "additionalProperties": false
}
🔴launch_assessment(workspaceSlug, assessmentId, idempotencyKey)

Consume a recent human approval and submit the immutable assessment to Hacker Bob's managed queue. The target is resolved only from the stored verified asset.

Input Schema

{
  "type": "object",
  "properties": {
    "workspaceSlug": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80,
      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
      "description": "Workspace slug selected during agent authorization."
    },
    "assessmentId": {
      "type": "string",
      "minLength": 1,
      "maxLength": 128
    },
    "idempotencyKey": {
      "type": "string",
      "minLength": 8,
      "maxLength": 128
    }
  },
  "required": [
    "workspaceSlug",
    "assessmentId",
    "idempotencyKey"
  ],
  "additionalProperties": false
}
🔴cancel_assessment(workspaceSlug, assessmentId, idempotencyKey)

Cancel an eligible queued or running assessment and reconcile any refundable reserved credit.

Input Schema

{
  "type": "object",
  "properties": {
    "workspaceSlug": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80,
      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
      "description": "Workspace slug selected during agent authorization."
    },
    "assessmentId": {
      "type": "string",
      "minLength": 1,
      "maxLength": 128
    },
    "idempotencyKey": {
      "type": "string",
      "minLength": 8,
      "maxLength": 128
    }
  },
  "required": [
    "workspaceSlug",
    "assessmentId",
    "idempotencyKey"
  ],
  "additionalProperties": false
}
🟢list_findings(workspaceSlug, status, severity, assetId)

List workspace findings with optional lifecycle and severity filters.

Input Schema

{
  "type": "object",
  "properties": {
    "workspaceSlug": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80,
      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
      "description": "Workspace slug selected during agent authorization."
    },
    "status": {
      "type": "string",
      "maxLength": 40
    },
    "severity": {
      "type": "string",
      "enum": [
        "critical",
        "high",
        "medium",
        "low"
      ]
    },
    "assetId": {
      "type": "string",
      "minLength": 1,
      "maxLength": 128
    }
  },
  "required": [
    "workspaceSlug"
  ],
  "additionalProperties": false
}
🟢get_finding(workspaceSlug, findingId)

Return one finding with evidence-safe lifecycle history and related asset metadata.

Input Schema

{
  "type": "object",
  "properties": {
    "workspaceSlug": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80,
      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
      "description": "Workspace slug selected during agent authorization."
    },
    "findingId": {
      "type": "string",
      "minLength": 1,
      "maxLength": 128
    }
  },
  "required": [
    "workspaceSlug",
    "findingId"
  ],
  "additionalProperties": false
}
🟢list_reports(workspaceSlug)

List non-revoked reports released to the approved workspace.

Input Schema

{
  "type": "object",
  "properties": {
    "workspaceSlug": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80,
      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
      "description": "Workspace slug selected during agent authorization."
    }
  },
  "required": [
    "workspaceSlug"
  ],
  "additionalProperties": false
}
🟢get_report(workspaceSlug, reportId)

Return one released, non-revoked workspace report. Pending review material and access credentials are never returned.

Input Schema

{
  "type": "object",
  "properties": {
    "workspaceSlug": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80,
      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
      "description": "Workspace slug selected during agent authorization."
    },
    "reportId": {
      "type": "string",
      "minLength": 1,
      "maxLength": 128
    }
  },
  "required": [
    "workspaceSlug",
    "reportId"
  ],
  "additionalProperties": false
}
🟢get_credit_summary(workspaceSlug)

Return available, reserved, and used assessment credits for the approved workspace.

Input Schema

{
  "type": "object",
  "properties": {
    "workspaceSlug": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80,
      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
      "description": "Workspace slug selected during agent authorization."
    }
  },
  "required": [
    "workspaceSlug"
  ],
  "additionalProperties": false
}
🟢list_audit_events(workspaceSlug, actor, action, fromAt, toAt)

List recent workspace audit events with optional actor, action, and time filters.

Input Schema

{
  "type": "object",
  "properties": {
    "workspaceSlug": {
      "type": "string",
      "minLength": 1,
      "maxLength": 80,
      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$",
      "description": "Workspace slug selected during agent authorization."
    },
    "actor": {
      "type": "string",
      "maxLength": 254
    },
    "action": {
      "type": "string",
      "maxLength": 80
    },
    "fromAt": {
      "type": "number",
      "minimum": 0
    },
    "toAt": {
      "type": "number",
      "minimum": 0
    }
  },
  "required": [
    "workspaceSlug"
  ],
  "additionalProperties": false
}

Community

Rate this Server

Evidence

Recent observations

verifiedversion not recorded22 tools
verifiedversion not recorded22 tools
verifiedversion not recorded22 tools
verifiedversion not recorded22 tools
verifiedversion not recorded22 tools
verifiedversion not recorded22 tools