How to Use the HackerOne MCP in OpenAI Agents SDK

Q: Can OpenAI Agents SDK use HackerOne tools for automated triage?

Yes. Your agent can call listreports to grab new submissions and then use addreportcomment to ask researchers for more info.

Manage your security program directly from OpenAI Agents SDK. Automate triage and bounty payouts with zero-trust safety.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect HackerOne MCP to OpenAI Agents SDK

Create your Vinkius account to connect HackerOne to OpenAI Agents SDK and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup HackerOne with OpenAI Agents SDK

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Full report lifecycle for OpenAI Agents SDK

Your agent handles the noise of incoming submissions using `list_reports` and `get_report`. It pulls the data directly into your Python environment for immediate review. Once the context is clear, the agent triggers `change_report_state` to move tickets through your pipeline. It keeps the workflow moving without you touching the dashboard.

Program oversight in OpenAI Agents SDK

Use `get_program` and `list_assets` to keep your agent informed on the current scope of your security programs. It knows exactly what is in play before it starts evaluating a report. This visibility ensures your agent only acts on valid assets. You define the boundaries, and the agent respects them during every interaction.

Financial control for OpenAI Agents SDK

The agent uses `list_payments` to track spend against your budget in real time. It keeps a clear record of every transaction for your audit logs. When it is time to reward a researcher, `award_bounty` handles the transfer after your internal logic confirms the severity. You retain the final call on all payouts.

Setup guide

Set up HackerOne MCP in OpenAI Agents SDK

Prerequisites

Python 3.10+ installed
openai-agents package (pip install openai-agents)
Active Vinkius subscription with a valid endpoint token

1

Install the SDK

Run pip install openai-agents to install the OpenAI Agents SDK. The MCP integration is built-in — no extra dependencies needed.
2

Connect via SSE transport

Use MCPServerSse with your Vinkius endpoint URL. Replace [YOUR_TOKEN_HERE] with your token from cloud.vinkius.com. The SDK auto-discovers all HackerOne tools at runtime.
3

Create your Agent

Pass the MCP to Agent(mcp_servers=[server]). The agent receives HackerOne tools as native definitions — JSON schemas resolve automatically.
4

Run the agent

Call Runner.run(agent, prompt) to execute. The agent invokes the appropriate HackerOne tools and returns structured results. Copy the full example on the right to get started.

agent.py

import asyncio
from agents import Agent, Runner
from agents.mcp import MCPServerSse

async def main():
    async with MCPServerSse(
        url="https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    ) as server:
        agent = Agent(
            name="HackerOne Agent",
            instructions="You have access to HackerOne tools.",
            mcp_servers=[server],
        )
        result = await Runner.run(agent, "List recent transactions")
        print(result.final_output)

asyncio.run(main())

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by HackerOne. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect HackerOne now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about HackerOne MCP in OpenAI Agents SDK

You initialize the connection using the MCPServerStreamableHttp class. Pass your endpoint token, and your agent will auto-discover all 10 tools instantly.

Yes. Your agent can call `list_reports` to grab new submissions and then use `add_report_comment` to ask researchers for more info.

Vinkius handles the security layer. Your data is ephemeral, and the agent only interacts with the API through your authenticated session.

The server will return an error code. You should implement a retry loop in your agent code to handle backoff gracefully.

It exposes whatever your API token permits. The server touches sensitive vulnerability reports and payment history, so restrict your token permissions accordingly.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript