• REWARDS
  • AUDIT
  • RECONCILIATION
  • HUMAN

How to award bounties and track payments with your AI

Connect HackerOne to your AI client to handle reward distribution and financial auditing through simple chat commands.

Ask AI about this page

Short answer

How can I automate bounty rewards and payment tracking?

You can issue rewards for specific vulnerabilities and pull payment logs directly in your chat interface. This setup lets you manage the financial side of your bug bounty program without jumping back and forth between browser tabs. You'll get immediate confirmation of payouts and a clear view of your spending.

The results of your requests.

Where your data lands.

Your AI handles the data heavy lifting so you can focus on security research.

REWARDS

Instant bounty issuance

The AI executes reward payouts for specific reports. You get confirmation once the transaction is processed.

AUDIT

Clear payment history

Pull a full list of past transactions to verify payouts. This makes reconciling your budget much easier.

RECONCILIATION

Financial oversight

Cross-reference bounty amounts with specific researchers. You can quickly spot discrepancies in your spending.

HUMAN

Manual oversight required

You still decide which reports qualify for rewards. The AI only executes the command once you give the word.

The workflow

What your AI does when you request a payout or audit.

The AI translates your plain English instructions into direct actions within HackerOne.

  1. Identify the target

    Your AI looks up the specific report or researcher you mentioned in your prompt.

    list_payments

  2. Issue the reward

    The agent sends the payout instruction to HackerOne for the specified amount.

    award_bounty

  3. Fetch transaction logs

    The AI pulls a list of recent payouts to show you exactly what was sent and to whom.

    list_payments

  4. Verify the data

    The AI compares the requested action against the existing payment history to ensure accuracy.

    list_payments

Try it

Copy these to start.

Use these prompts to trigger actions immediately.

Starting points

Replace the bracketed text with your actual report IDs or researcher names.

HackerOne Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_MdngwsTWgI8aN2tcglppukreOCXiR4XOops4TQFJ/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — HackerOne capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "hackerone-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_MdngwsTWgI8aN2tcglppukreOCXiR4XOops4TQFJ/mcp"
    }
  }
}
Copy into chat04

  • Award a bounty of $500 for report [ID].

  • Show me all payments made to [Researcher Name] this month.

  • List the last five payments processed in the program.

  • Did we pay out any bounties for [Report ID] yet?

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect HackerOne once, then ask.

One connection gives your AI access to your HackerOne financial data. Your credentials stay encrypted and secure.

Connect HackerOne to your AI

FAQ

How this task behaves.

  • 01

    Can the AI decide how much to pay a researcher?

    No. The AI only executes the reward amount you specify in your prompt.

  • 02

    Can I use this to delete payment records?

    No. The available tools only allow for issuing rewards and listing existing payments.

  • 03

    Does the AI have full access to my HackerOne account?

    The AI only has access to the specific actions provided by the tools in this MCP.

  • 04

    Can I audit my entire budget history?

    Yes, you can use the AI to list all payments to review your spending history.

  • 05

    Will the AI automatically pay every new report?

    No. The AI does nothing unless you explicitly tell it to award a bounty.

  • More questions about HackerOne? The Connector page answers them. See everything the HackerOne Connector can do

Connect HackerOne to Claude, Cursor, ChatGPT & more