Hackerone MCP Server
MCP server for the HackerOne Hacker API (Hackers section only). Built from https://api.hackerone.com/hacker-resources/
context tax
pending
security
pending
cold start
pending
freshness
pending
Our reading of Hackerone, from the data
Hackerone is an MCP server from j0hndo.
We haven't measured its tool list yet, so its token cost is unknown.
It runs locally on your machine over stdio.
Install Hackerone MCP server
Install in Claude Code
claude mcp add hackerone -- npx -y hackerone-mcpInstall in Cursor
{
"mcpServers": {
"hackerone": {
"command": "npx",
"args": [
"-y",
"hackerone-mcp"
]
}
}
}Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (project).
Install in Claude Desktop
{
"mcpServers": {
"hackerone": {
"command": "npx",
"args": [
"-y",
"hackerone-mcp"
]
}
}
}Settings → Developer → Edit Config (claude_desktop_config.json), then restart.
Install in VS Code
{
"servers": {
"hackerone": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"hackerone-mcp"
]
}
}
}Add to .vscode/mcp.json in your workspace.
Install in Windsurf
{
"mcpServers": {
"hackerone": {
"command": "npx",
"args": [
"-y",
"hackerone-mcp"
]
}
}
}Add to ~/.codeium/windsurf/mcp_config.json.
Freshness
Not enough public signals yet to judge maintenance.
Last commit (default branch)
2026-06-08 · 4mo ago · GitHub
Latest release
no data · GitHub
Package published
no data · npm/PyPI
Registry entry updated
no data · official registry
FAQ
›How do I install the Hackerone MCP server in Claude Code?
Run: claude mcp add hackerone -- npx -y hackerone-mcp. For Cursor, VS Code, Claude Desktop and Windsurf, use the install tabs above.
›Does Hackerone require an API key?
No required environment variables are declared in its published metadata.
›Can I use Hackerone as a remote (hosted) MCP server?
No hosted endpoint is published; it runs locally over stdio.
›Is Hackerone in the official MCP registry?
No. It was indexed from npm.
Sources and method
- GitHub repository
- fetched 2026-10-19
- Package registry (npm / PyPI)
- listed
- Last checked against all sources
- 2026-10-19
The description, packages and links come from the maintainer's own published metadata. Token cost, security signals, freshness and the reading above are MCPSkillHub's own measurements; see the methodology. Spot an error? Request a correction or claim the listing.