Skip to content
Vinkius

HackerOne Connector for AI agents.

10 live capabilities

Manage bug bounty reports and vulnerability triage from your chat.

Live agent request HackerOne / Connector

Waiting for input…

AI Agent

Why people use HackerOne

HackerOne for Faster Vulnerability Triage

This Connector lets you do all of that through a simple chat. You can pull report details or update a status with a single sentence. You get to stay in your flow and focus on the actual security fixes instead of the administrative overhead.

  • Claude
  • ChatGPT
  • Gemini
  • Cursor
  • Visual Studio Code
  • Windsurf

What Vinkius changes

You get a direct line to your HackerOne data without the manual clicking.

Use it from Claude, ChatGPT, Cursor or another AI client you already have.

One account · 5,900+ Connectors

  1. Real-world use case 01

    The Triage Rush

    A security engineer gets 50 new reports.

  2. Real-world use case 02

    The Fast Payout

    A bug bounty manager confirms a fix.

  3. Real-world use case 03

    The Scope Check

    A developer wants to know if a specific IP is in scope.

Complete set · 10capabilities

The complete HackerOne capability set.

These are the exact actions your AI can choose when you ask it to work with HackerOne.

Capability set01 / 03

01—04

4 capabilities in this set.

Part of 10 available through HackerOne.

  1. 01 Capability

    List hacktivity

    List the HackerOne hacktivity feed. This keeps you updated on recent discoveries in real time.

  2. 02 Capability

    List payments

    List bounty payments history. This helps you track your total spend and reward history.

  3. 03 Capability

    List programs

    List bug bounty or VDP programs you have access to. This gives you an overview of all your managed programs.

  4. 04 Capability

    List reports

    List vulnerability reports submitted to your HackerOne program. This is the fastest way to see new submissions.

Capability set02 / 03

05—07

3 capabilities in this set.

Part of 10 available through HackerOne.

  1. 05 Capability

    Add report comment

    Add a comment to a specific vulnerability report. This helps you communicate with researchers directly.

  2. 06 Capability

    Award bounty

    Award a bounty for a vulnerability report. You can process rewards quickly to keep researchers happy.

  3. 07 Capability

    Change report state

    Update the state of a vulnerability report. This lets you move reports to triaged or resolved status.

Capability set03 / 03

08—10

3 capabilities in this set.

Part of 10 available through HackerOne.

  1. 08 Capability

    Get program

    Get details for a specific security program. Use this to check scope and specific program rules.

  2. 09 Capability

    Get report

    Get detailed information about a specific vulnerability report. This pulls all relevant data for a single bug.

  3. 10 Capability

    List assets

    List assets defined in your security programs. This shows you exactly what is in scope for your tests.

Set up in minutes

One URL. Then ask HackerOne to work.

Claude and ChatGPT only need the Connector URL. Copy it once, add it in settings, and use HackerOne from the conversation.

Choose your client

Live preview
Advanced clients IDE · CLI

Claude · Web + desktop

Official guide ↗

Connector URL · ready to paste

Streamable HTTP
https://edge.vinkius.com/vk_preview_MdngwsTWgI8aN2tcglppukreOCXiR4XOops4TQFJ/mcp
  1. Step 01

    Open Connectors

    In Claude Web or Claude Desktop, open Settings and choose Connectors.

  2. Step 02

    Add the URL

    Choose Add custom connector, name it HackerOne, and paste the URL above.

  3. Step 03

    Turn it on in chat

    Select +, open Connectors, and enable HackerOne for the conversation.

Where the request belongs

Work HackerOne can move forward.

Built around the request

Security teams who are drowning in reports and need to move faster. It's for the person who spends all day in a dashboard and wants to automate the busy work.

01

Security Engineer

Triages reports and checks severity ratings during active incidents.

02

Bug Bounty Manager

Handles researcher communication and awards payouts to keep the program running.

03

CISO

Maintains a real-time overview of incoming vulnerabilities and program health.

When one Connector is not enough

Combine HackerOne with the systems that finish the task.

View all recipes
01

Find API Vulnerabilities First Using MCP

Your OpenAPI spec has 14 security findings and 3 match active HackerOne reports , your agent creates the tickets before the bounty payout

Build the capability set

Add more capabilities.

Each Connector adds new actions and data without changing how you work.

Browse Connectors
Bugcrowd logo
01 10 capabilities

Bugcrowd

Manage crowdsourced security via Bugcrowd. track submissions, programs, and targets directly from any AI agent.

View Connector
Intruder logo
02 10 capabilities

Intruder

Automate vulnerability scanning and security monitoring via Intruder.io API.

View Connector
Beagle Security logo
03 10 capabilities

Beagle Security

Automate security testing via Beagle Security. list projects, start tests, and retrieve results directly from any AI agent.

View Connector
Rapid7 InsightVM logo
04 10 capabilities

Rapid7 InsightVM

Equip your AI to interact directly with Rapid7 InsightVM, extracting vulnerability assessments, scanning network assets, and launching immediate scans.

View Connector
StackHawk logo
05 10 capabilities

StackHawk

Connect your AI to the StackHawk DAST platform. Run automated security scans, triage alerts seamlessly, and find vulnerabilities effortlessly.

View Connector
Equixly logo
06 10 capabilities

Equixly

Automate API security testing via Equixly. manage target services, trigger autonomous AI pentests, and audit vulnerability findings directly from any AI agent.

View Connector

Bring your own AI

Change the model, client or framework. Keep HackerOne connected.

  • Claude
  • ChatGPT
  • Gemini
  • Cursor
  • VS Code
  • Windsurf
  • ZCode
  • Cline
  • Zed
  • Continue
  • Kiro
  • Roo Code
  • Zencoder
  • Goose
  • Void
  • Augment Code
  • Amp
  • Qodo
  • Tabnine
  • Pieces
  • Sourcegraph Cody
  • JetBrains
  • Warp
  • Amazon Q
  • Antigravity
  • BoltAI
  • Raycast
  • Jan
  • LM Studio
  • AnythingLLM
  • Open WebUI
  • Msty
  • Cherry Studio
  • LibreChat
  • TypingMind
  • Chorus
  • 5ire
  • n8n
  • LangChain
  • LlamaIndex
  • CrewAI
  • Vercel AI SDK

Before you connect

Questions about HackerOne.

The practical details behind the request, access and result.

Can I use the HackerOne MCP to manage my bug bounty rewards?

Yes, you can award bounties and view payment history directly through your AI agent. This helps you keep track of your spend and reward researchers quickly.

How does the HackerOne MCP help with vulnerability triage?

It allows your agent to list all new reports and pull specific details for each one. You can quickly identify high-priority bugs without digging through a dashboard.

Can my AI agent update report statuses with this Connector?

Yes, you can tell your agent to change a report's state to triaged, resolved, or closed. It updates your HackerOne program status in real time.

Does the HackerOne MCP work for VDP programs?

Yes, it supports both bug bounty and Vulnerability Disclosure Programs. You can manage your programs, assets, and reports regardless of the payout model.

Can I see my hacktivity feed using the HackerOne MCP?

Yes, you can pull the latest entries from your hacktivity feed. This keeps you updated on new discoveries and researcher activity as they happen.

How do I connect my HackerOne account to my AI client?

You just need to subscribe to the Connector and provide your HackerOne API Token Identifier and Token Value. Once connected, your agent can access your organization's data.

How do I generate my HackerOne API Token?

Log in to HackerOne, navigate to Settings > API Token, and click 'Create API Token'. Make sure to copy both the Identifier and the Token Value immediately.

Can I award bounties through this integration?

Yes! Use the award_bounty capability by providing the report ID and the amount. You can also specify an optional bonus amount for the researcher.

Does the integration support internal comments?

Yes, the add_report_comment capability has an optional internal boolean parameter (defaults to true). This allows you to communicate with your team privately on a specific report.

Can I filter reports by their handle or ID?

You can use list_reports to see all reports or get_report with a specific ID to retrieve detailed information for a single discovery.

One connection away

Give your agent a direct line to HackerOne.

Connect HackerOne once. Keep it beside 5,900+ managed Connectors when the next task needs more.

Explore every Connector No credit card required · Free tier available