Bugcrowd Connector for AI agents.
10 live capabilities
Manage bug bounty programs and vulnerability reports from your AI client.
Waiting for input…
Why people use Bugcrowd
Bugcrowd for Faster Vulnerability Triage
This Connector changes that by letting your AI agent do the heavy lifting. You can just ask for a summary of new submissions or a status update on a specific engagement, getting the info you need in seconds without ever opening a browser tab.
What Vinkius changes
You get a direct line to your Bugcrowd data without manual dashboard navigation.
Use it from Claude, ChatGPT, Cursor or another AI client you already have.
One account · 5,900+ Connectors
- Real-world use case 01
Triage Overflow
A manager asks for the last 10 submissions to see if any high-severity bugs need immediate attention.
- Real-world use case 02
Scope Verification
An engineer asks to list targets for a specific program to see if a reported URL is actually in scope.
- Real-world use case 03
Program Audit
A security lead wants to see all active programs and their rewards to prepare for a quarterly review.
Complete set · 10capabilities
The complete Bugcrowd capability set.
These are the exact actions your AI can choose when you ask it to work with Bugcrowd.
01—04
4 capabilities in this set.
Part of 10 available through Bugcrowd.
- 01 Capability
Create submission
Create a new vulnerability report from an external source using natural language. This helps you log findings quickly.
- 02 Capability
Get engagement
Get the specific details and status of a bug bounty or pen test. Use this to track active crowd work.
- 03 Capability
Get organization info
Retrieve your core organization settings and workspace details. This is useful for quick configuration audits.
- 04 Capability
Get program
Get specific metadata, rewards, and scopes for a security program. Use this to verify program details.
05—07
3 capabilities in this set.
Part of 10 available through Bugcrowd.
- 05 Capability
Get submission
Get the full details of a single vulnerability report. This helps you inspect specific bug findings.
- 06 Capability
Get target
Get details on a specific asset or target in scope. This helps you confirm if a target is valid.
- 07 Capability
List engagements
List all active crowd engagements like bounties and pen tests. Use this to see all current work.
08—10
3 capabilities in this set.
Part of 10 available through Bugcrowd.
- 08 Capability
List programs
List all security programs currently active in your workspace. This provides a high-level program overview.
- 09 Capability
List submissions
List all vulnerability submissions across your programs. This helps you see all incoming reports at once.
- 10 Capability
List targets
List all assets currently in scope for your organization. Use this to audit your current target list.
Set up in minutes
One URL. Then ask Bugcrowd to work.
Claude and ChatGPT only need the Connector URL. Copy it once, add it in settings, and use Bugcrowd from the conversation.
Choose your client
Live previewAdvanced clients IDE · CLI
Claude · Web + desktop
Connector URL · ready to paste
Streamable HTTPhttps://edge.vinkius.com/vk_preview_pOcsQxZr13X2rNcGUbtE04FMIHfX8vBhvP2v43C1/mcp - Step 01
Open Connectors
In Claude Web or Claude Desktop, open Settings and choose Connectors.
- Step 02
Add the URL
Choose Add custom connector, name it Bugcrowd, and paste the URL above.
- Step 03
Turn it on in chat
Select +, open Connectors, and enable Bugcrowd for the conversation.
ChatGPT · Web + desktop
Connector URL · ready to paste
Streamable HTTPhttps://edge.vinkius.com/vk_preview_pOcsQxZr13X2rNcGUbtE04FMIHfX8vBhvP2v43C1/mcp - Step 01
Open MCP settings
On desktop, open Settings and MCP servers. On web, open your workspace app or connector settings.
- Step 02
Add the URL
Choose Add server with Streamable HTTP, or create a custom MCP app, then paste the Bugcrowd URL.
- Step 03
Save and start
Save the connection and enable Bugcrowd in your conversation. Desktop may ask you to restart once.
Cursor · IDE configuration
Advanced setup
{
"mcpServers": {
"bugcrowd": {
"url": "https://edge.vinkius.com/vk_preview_pOcsQxZr13X2rNcGUbtE04FMIHfX8vBhvP2v43C1/mcp"
}
}
} - Step 01
Open MCP Settings
Press Cmd+Shift+P (macOS) or Ctrl+Shift+P (Windows/Linux) → search "MCP Settings"
- Step 02
Add the server config
Paste the JSON configuration above into the mcp.json file that opens
- Step 03
Save the file
Cursor will automatically detect the new Connector
- Step 04
Start using Bugcrowd
Open Agent mode in chat and ask: "Using Bugcrowd, help me...". 10 tools available
VS Code Copilot · IDE configuration
Advanced setup
{
"mcpServers": {
"bugcrowd": {
"url": "https://edge.vinkius.com/vk_preview_pOcsQxZr13X2rNcGUbtE04FMIHfX8vBhvP2v43C1/mcp"
}
}
} - Step 01
Create MCP config
Create a .vscode/mcp.json file in your project root
- Step 02
Add the server config
Paste the JSON configuration above
- Step 03
Enable Agent mode
Open GitHub Copilot Chat and switch to Agent mode using the dropdown
- Step 04
Start using Bugcrowd
Ask Copilot: "Using Bugcrowd, help me...". 10 tools available
Windsurf · IDE configuration
Advanced setup
{
"mcpServers": {
"bugcrowd": {
"url": "https://edge.vinkius.com/vk_preview_pOcsQxZr13X2rNcGUbtE04FMIHfX8vBhvP2v43C1/mcp"
}
}
} - Step 01
Open MCP Settings
Go to Settings → MCP Configuration or press Cmd+Shift+P and search "MCP"
- Step 02
Add the server
Paste the JSON configuration above into mcp_config.json
- Step 03
Save and reload
Windsurf will detect the new server automatically
- Step 04
Start using Bugcrowd
Open Cascade and ask: "Using Bugcrowd, help me...". 10 tools available
Cline · IDE configuration
Advanced setup
{
"mcpServers": {
"bugcrowd": {
"url": "https://edge.vinkius.com/vk_preview_pOcsQxZr13X2rNcGUbtE04FMIHfX8vBhvP2v43C1/mcp"
}
}
} - Step 01
Open Cline MCP Settings
Click the Connectors icon in the Cline sidebar panel
- Step 02
Add remote server
Click "Add Connector" and paste the configuration above
- Step 03
Enable the server
Toggle the server switch to ON
- Step 04
Start using Bugcrowd
Ask Cline: "Using Bugcrowd, help me...". 10 tools available
Claude Code · Terminal command
Advanced setup
claude mcp add bugcrowd --transport http "https://edge.vinkius.com/vk_preview_pOcsQxZr13X2rNcGUbtE04FMIHfX8vBhvP2v43C1/mcp" - Step 01
Install Claude Code
Run npm install -g @anthropic-ai/claude-code if not already installed
- Step 02
Add the Connector
Run the command above in your terminal
- Step 03
Verify the connection
Run claude mcp to list connected servers, or type /mcp inside a session
- Step 04
Start using Bugcrowd
Ask Claude: "Using Bugcrowd, show me...". 10 tools are ready
Where the request belongs
Work Bugcrowd can move forward.
This is for the security analyst who is tired of jumping between the Bugcrowd dashboard and their internal ticketing system. It's for people managing high-volume bug bounty programs who need to triage reports fast.
Vulnerability Manager
Triage and update report statuses during stand-ups without logging into the web portal.
Security Engineer
Quickly check the scope of a specific target when a researcher reports a new finding.
CISO
Get a high-level overview of program health and active engagements across the organization.
Build the capability set
Add more capabilities.
Each Connector adds new actions and data without changing how you work.
Browse ConnectorsHackerOne
Automate bug bounty management via HackerOne. manage reports, programs, and payments directly from any AI agent.
Beagle Security
Automate security testing via Beagle Security. list projects, start tests, and retrieve results directly from any AI agent.
Aikido Security
Query security vulnerabilities via Aikido. list open issues, check repositories, monitor cloud assets, and track compliance directly from any AI agent.
Equixly
Automate API security testing via Equixly. manage target services, trigger autonomous AI pentests, and audit vulnerability findings directly from any AI agent.
42Crunch
Automate API security testing via 42Crunch. manage collections, trigger audits, run conformance scans, and retrieve security reports directly from any AI agent.
Intruder
Automate vulnerability scanning and security monitoring via Intruder.io API.
Bring your own AI
Change the model, client or framework. Keep Bugcrowd connected.
-
Claude -
ChatGPT -
Gemini -
Cursor -
VS Code -
Windsurf -
ZCode -
Cline -
Zed -
Continue -
Kiro -
Roo Code -
Zencoder -
Goose -
Void -
Augment Code -
Amp -
Qodo -
Tabnine -
Pieces -
Sourcegraph Cody -
JetBrains -
Warp -
Amazon Q -
Antigravity -
BoltAI -
Raycast -
Jan -
LM Studio -
AnythingLLM -
Open WebUI -
Msty -
Cherry Studio -
LibreChat -
TypingMind -
Chorus -
5ire -
n8n -
LangChain -
LlamaIndex -
CrewAI -
Vercel AI SDK
Before you connect
Questions about Bugcrowd.
The practical details behind the request, access and result.
Can I use the Bugcrowd MCP to see my bug bounty reports?
Yes, this Connector lets you view all vulnerability submissions across your programs. You can ask your agent to list them all or pull details on a specific report.
Does the Bugcrowd MCP work with Cursor?
Yes, you can connect this Connector to Cursor or any other compatible client. Once connected, you can manage your security programs directly from your code editor.
How do I add a new report to Bugcrowd using this?
You can use the create_submission capability to log new findings. Just tell your agent the details of the vulnerability, and it will create the report for you.
Can my agent check which assets are in scope?
Yes, it can list all targets in your programs. This is great for quickly verifying if a researcher's finding is within your authorized scope.
Is this Connector for managing my Bugcrowd payments?
No, this Connector focuses on vulnerability management, programs, and targets. It does not handle financial transactions or payment processing.
Can I see all my active pen tests?
Yes, you can list all active crowd engagements. This includes both bug bounty programs and professional penetration tests.
Can I check the scope of a security program using the agent?
Yes! Use the get_program capability with the Program ID. Your agent will fetch the detailed metadata, including targets and scope descriptions, from Bugcrowd.
How do I list all the vulnerability submissions for my account?
Simply ask the agent to list_submissions. It will retrieve the latest vulnerability reports from your Bugcrowd account, including titles and statuses like 'triaged' or 'resolved'.
Does the integration allow creating a new submission?
Yes. Use the create_submission action and provide the title and description. You can also associate it with a specific program by providing the program_id.
One connection away
Give your agent a direct line to Bugcrowd.
Connect Bugcrowd once. Keep it beside 5,900+ managed Connectors when the next task needs more.
Explore every Connector No credit card required · Free tier available