Integrations

HackerOne (public helpers)

mcp/hackerone-mcp/ wraps HackerOne’s public GraphQL API. No auth required for these helpers. Tools exposed by that server:

Search disclosed reports (Hacktivity)
Program stats (bounty ranges, response times, resolved counts)
Program policy (safe harbor, SLA, excluded classes)

Deferred (not shipped as stable submit): authenticated endpoints such as submit_report and private scope. Treat report submission as a manual step after bughunter report / bughunter_generate_report. Native BugHunter MCP also surfaces program helpers as bughunter_program and bughunter_program_policy.

Burp Suite (third-party MCP)

Experimental / third-party. Config and docs live under mcp/burp-mcp-client/. Burp runs PortSwigger’s MCP Server extension (SSE, default http://127.0.0.1:9876); a Java proxy jar bridges stdio clients. Typical Claude settings shape:

{
  "mcpServers": {
    "burp": {
      "command": "java",
      "args": ["-jar", "/path/to/mcp-proxy-all.jar", "--sse-url", "http://127.0.0.1:9876"]
    }
  }
}

Follow mcp/burp-mcp-client/README.md for building the extension and extracting the proxy jar. Burp is optional — CLI hunt commands work without it.

Caido (third-party MCP)

Experimental / third-party. Config under mcp/caido-mcp-client/. Uses the community Caido MCP server so an agent can read proxy history and replay traffic. See that folder’s README for install and token setup.

Web3

Web3 is a first-class skill and command surface in the plugin:

Piece	Role
Skill `web3-audit`	10 smart-contract bug classes + Foundry PoC template
Skill `meme-coin-audit`	Token / rug-pull and LP analysis
Slash `/web3-audit`	Contract audit checklist (agent harness)
Slash `/token-scan`	Token rug-pull style signals (agent harness)

Immunefi-oriented report formatting is covered by report-writing. Use only on programs and contracts you are authorized to assess.

Agent harnesses

Target	Install
Claude Code	`./install.sh` or `--agent claude`
OpenCode	`--agent opencode`
Pi	`--agent pi`
Codex	`--agent codex`
Shared Agent Skills	`--agent agents`
Native BugHunter MCP	`--agent mcp`

Get started

Research

Integrate

Help

HackerOne (public helpers)

Burp Suite (third-party MCP)

Caido (third-party MCP)

Web3

Agent harnesses

​HackerOne (public helpers)

​Burp Suite (third-party MCP)

​Caido (third-party MCP)

​Web3

​Agent harnesses

​Related

HackerOne (public helpers)

Burp Suite (third-party MCP)

Caido (third-party MCP)

Web3

Agent harnesses

Related