
HackerOne
HackerOne MCP server
HackerOne MCP server
HackerOne MCP server
for Claude, ChatGPT, Cursor and your own agents
for Claude, ChatGPT, Cursor and your own agents
for Claude, ChatGPT, Cursor and your own agents
HackerOne MCP server
HackerOne MCP server
HackerOne MCP server
for Claude, ChatGPT, Cursor and your own agents
for Claude, ChatGPT, Cursor and your own agents
for Claude, ChatGPT, Cursor and your own agents
Expose HackerOne to Claude, ChatGPT, Cursor or your own agents as a governed MCP server, even if the vendor doesnโt ship one. Mindflow turns every API operation into an MCP tool and keeps the connector current when the API changes. The MCP Gateway sits between your AI clients and your data, with scoped access, human approval before sensitive writes and a record of every call.
Expose HackerOne to Claude, ChatGPT, Cursor or your own agents as a governed MCP server, even if the vendor doesnโt ship one. Mindflow turns every API operation into an MCP tool and keeps the connector current when the API changes. The MCP Gateway sits between your AI clients and your data, with scoped access, human approval before sensitive writes and a record of every call.

11
operation
s
available
Complete and up-to-date endpoint coverage by Mindflow.

11
operation
s
available
Complete and up-to-date endpoint coverage by Mindflow.

11
operation
s
available
Complete and up-to-date endpoint coverage by Mindflow.
Our customers scale automation with security built in.
Tools exposed by this MCP server
Every HackerOne operation, as an MCP tool
Every HackerOne operation, as an MCP tool
Each API operation becomes a tool your AI client can call. You decide which ones: allow reads, require approval before sensitive writes and block the rest. A few of the most used:

HackerOne
HackerOne
Add summary to report
Add summary to report

HackerOne
HackerOne
Assign report
Assign report

HackerOne
HackerOne
Award bounty
Award bounty

HackerOne
HackerOne
Change state of report
Change state of report

HackerOne
HackerOne
Mark ineligible for bounty
Mark ineligible for bounty

HackerOne
HackerOne
Redact report
Redact report

HackerOne
HackerOne
Request retest
Request retest

HackerOne
HackerOne
Set issue reference id
Set issue reference id

HackerOne
HackerOne
Set report ineligible
Set report ineligible

HackerOne
HackerOne
Update severity of report
Update severity of report

HackerOne
HackerOne
Update title of report
Update title of report

HackerOne
Add summary to report

HackerOne
Assign report

HackerOne
Award bounty

HackerOne
Change state of report

HackerOne
Mark ineligible for bounty

HackerOne
Redact report

HackerOne
Request retest

HackerOne
Set issue reference id

HackerOne
Set report ineligible

HackerOne
Update severity of report

HackerOne
Update title of report

HackerOne
HackerOne
Update title of report
Update title of report

HackerOne
HackerOne
Update severity of report
Update severity of report

HackerOne
HackerOne
Set report ineligible
Set report ineligible

HackerOne
HackerOne
Set issue reference id
Set issue reference id

HackerOne
HackerOne
Request retest
Request retest

HackerOne
HackerOne
Redact report
Redact report

HackerOne
HackerOne
Mark ineligible for bounty
Mark ineligible for bounty

HackerOne
HackerOne
Change state of report
Change state of report

HackerOne
HackerOne
Award bounty
Award bounty

HackerOne
HackerOne
Assign report
Assign report

HackerOne
HackerOne
Add summary to report
Add summary to report

HackerOne
Update title of report

HackerOne
Update severity of report

HackerOne
Set report ineligible

HackerOne
Set issue reference id

HackerOne
Request retest

HackerOne
Redact report

HackerOne
Mark ineligible for bounty

HackerOne
Change state of report

HackerOne
Award bounty

HackerOne
Assign report

HackerOne
Add summary to report
Connect HackerOne to your AI client in three steps.
01
Connect the service
Add HackerOne in Mindflow with its credentials. They stay in Mindflow and never reach the AI client.
02
Choose the tools
Pick the operations each AI client may call. Allow reads, require approval before sensitive writes and block the rest.
03
Connect your AI client
Point Claude, ChatGPT, Cursor or your own agent to your MCP Gateway endpoint, then check real calls in the audit log.
Use cases
Use cases
What your AI agents can do with HackerOne
What your AI agents can do with HackerOne
AI clients
Mindflow

HackerOne
โ Automate vulnerability report updates by immediately adding summaries and revising report titles upon new findings; this reduces manual effort and ensures bug bounty reports in HackerOne reflect the latest insights smoothly. โ Streamline bounty management by automatically awarding bounties or marking reports ineligible based on real-time criteria; this drives consistent and timely reward processes within HackerOne. โ Enhance report triage with automated assignment and state changes to route issues to the right security teams and track progress through HackerOneโs report lifecycle seamlessly.
โ Automate vulnerability report updates by immediately adding summaries and revising report titles upon new findings; this reduces manual effort and ensures bug bounty reports in HackerOne reflect the latest insights smoothly. โ Streamline bounty management by automatically awarding bounties or marking reports ineligible based on real-time criteria; this drives consistent and timely reward processes within HackerOne. โ Enhance report triage with automated assignment and state changes to route issues to the right security teams and track progress through HackerOneโs report lifecycle seamlessly.
Every call goes through one governed endpoint.
Every call goes through one governed endpoint.
Your AI clients get access. You keep control.
Your AI clients get access. You keep control.
Every call to HackerOne goes through the Mindflow MCP Gateway. The same policies apply to every AI client: role-based access by team and environment, scoped credentials that never reach the client, human approval before sensitive writes, and a log of every call you can export to your SIEM.
Every call to HackerOne goes through the Mindflow MCP Gateway. The same policies apply to every AI client: role-based access by team and environment, scoped credentials that never reach the client, human approval before sensitive writes, and a log of every call you can export to your SIEM.

HackerOne MCP server
Live
RBAC ยท SecOps
Scoped credentials
Audit log

Add summary to report
Allowed

Assign report
Allowed

Award bounty
Needs approval

Change state of report
Blocked
Every call logged ยท Export to SIEM
Questions about the HackerOne MCP server
Clear answers before you connect an AI client.
Questions about the HackerOne MCP server
Clear answers before you connect an AI client.
Explore more MCP servers in our catalog of 4,000+ services.
Put this MCP server to work.
Bring one AI client and the tools it needs. Weโll show you the setup in Mindflow, from scoped access to the audit log.
Put this MCP server to work.
Bring one AI client and the tools it needs. Weโll show you the setup in Mindflow, from scoped access to the audit log.
Less busywork. More possibility.
Let your agents handle the routine. Make room for what comes next.
Resources
Automation intelligence, delivered monthly.
Product releases, automation playbooks, and security research โ straight to your inbox. No spam, unsubscribe anytime.
Less busywork. More possibility.
Let your agents handle the routine. Make room for what comes next.
Resources
Automation intelligence, delivered monthly.
Product releases, automation playbooks, and security research โ straight to your inbox. No spam, unsubscribe anytime.
Less busywork. More possibility.
Let your agents handle the routine. Make room for what comes next.
Resources
Automation intelligence, delivered monthly.
Product releases, automation playbooks, and security research โ straight to your inbox. No spam, unsubscribe anytime.