Bug Bounty Hunter MCP Server 🎯⚡

Automated recon → vuln scan → Solidity audit → report → submit. Hunt while you sleep.

Bug bounty automation toolkit exposed as a Model Context Protocol (MCP) server. Hunt Web2 and Web3 vulnerabilities across Immunefi, Code4rena, Cantina, HackerOne, and Bugcrowd.

What It Does

Tool	What It Does
bounty_recon	Subdomain enum, tech detection, port scan, screenshots, JS endpoint extraction
bounty_vuln_scan	SQLi, XSS, IDOR, SSRF, LFI, open redirect, CORS, JWT weaknesses
bounty_solidity_scan	Reentrancy, oracle manipulation, access control, delegatecall, tx.origin, timestamp
bounty_scope	Track programs, filter by platform/bounty/web3 focus
bounty_report	CVSS-scored reports with PoC and remediation

Install

pip install mcp-server-bug-bounty
# OR
git clone https://github.com/manteclaw/mcp-server-bug-bounty.git

Connect

{
  "mcpServers": {
    "bug-bounty": {
      "command": "python",
      "args": ["/path/to/server.py"]
    }
  }
}

Usage Examples

"Recon this target with deep scanning"

"Scan this URL for SQLi and XSS"

"Audit this Solidity contract for reentrancy and access control"

"List all Immunefi programs with $1M+ max bounty"

"Generate a report for these findings on Uniswap program"

Pricing

Tier	Price	Limits
Community	Free	10 calls/day
Hunter	$59/month	Unlimited scans + auto-report
Team	$399/month	Multi-target + Slack alerts

License

MIT

---

Built by Manteclaw | Immunefi-native hunter | Ship or die