How to Use the HackerOne MCP in Vercel AI SDK
Get real-time HackerOne vulnerability updates streaming directly into your Vercel AI SDK interface without annoying loading spinners.
Works with every AI agent you already use
…and any MCP-compatible client
Connect HackerOne MCP to Vercel AI SDK
Create your Vinkius account to connect HackerOne to Vercel AI SDK and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.
Stream Live Vulnerability Reports in Next.js
The `list_reports` tool pulls live HackerOne submissions and pushes them straight to your Vercel AI SDK frontend. Since Vercel AI SDK supports direct UI streaming, your team sees incoming HackerOne security bugs populate their dashboard in real-time.
Interactive HackerOne Triage via MCP Server
The `change_report_state` tool lets your developers update a HackerOne report's status directly from an interactive Vercel AI SDK chat bubble. This means you do not have to leave your custom Vercel AI SDK admin panel to sync status changes back to the main HackerOne platform.
Track Financial Spend and Bounties Instantly
The `list_payments` tool retrieves your complete HackerOne program payout history to render historical spend charts on the edge using Vercel AI SDK. By running Vercel AI SDK on Edge Functions, your custom HackerOne dashboard avoids heavy server-side overhead while keeping financial data fresh.
Set up HackerOne MCP in Vercel AI SDK
Prerequisites
- Node.js 18+ and a TypeScript project
-
ai+@modelcontextprotocol/sdkpackages - Active Vinkius subscription with a valid endpoint token
- 1
Install dependencies
Run
npm install ai @modelcontextprotocol/sdkplus your preferred model provider (e.g.@ai-sdk/openai). - 2
Create the Streamable HTTP transport
Use
StreamableHTTPClientTransportwith your Vinkius endpoint URL. Replace[YOUR_TOKEN_HERE]with your token from cloud.vinkius.com. - 3
Discover and use tools
Call
mcpClient.tools()to auto-discover all HackerOne tools. Pass them directly togenerateText()orstreamText()— no manual schema definitions needed. - 4
Works with any model provider
Swap
openai("gpt-4o")for any AI SDK provider — Anthropic, Google, Mistral. The MCP tools work identically across all supported models.
import { experimental_createMCPClient as createMCPClient } from "ai";
import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp";
import { generateText } from "ai";
import { openai } from "@ai-sdk/openai";
const transport = new StreamableHTTPClientTransport(
new URL("https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp")
);
const mcpClient = await createMCPClient({ transport });
const tools = await mcpClient.tools();
const { text } = await generateText({
model: openai("gpt-4o"),
tools,
prompt: "List recent HackerOne transactions",
});
console.log(text);
await mcpClient.close(); Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by HackerOne. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.
Why Choose Vinkius
Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.
Real-time monitoring
Live
visibility into every interaction
Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.
Built-in savings
60%
lower AI costs
Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.
Single dashboard
One
place for every integration
Every tool your AI connects to, managed from a single screen. One account, complete control.
Common questions about HackerOne MCP in Vercel AI SDK
Use it with your favorite AI tools
Connect this server to Cursor, Claude, VS Code, and more.
Start using the HackerOne MCP today
We host it, we monitor it, we maintain it. You just paste one token.