h1-brain MCP Server
PatrikFehrenbach/h1-brain
[](https://agentrank-ai.com/tool/PatrikFehrenbach--h1-brain/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge) MCP server that connects AI assistants to HackerOne for bug bounty hunting
claude mcp add agentrank -- npx -y agentrank-mcp-server Overview
PatrikFehrenbach/h1-brain is a Python MCP server licensed under MIT. MCP server that connects AI assistants to HackerOne for bug bounty hunting Topics: ai, bug-bounty, bug-bounty-tools, claude, hackerone, hacking, mcp, mcp-server, pentesting, security.
Ranked #516 out of 24846 indexed tools.
In the top 3% of all indexed tools.
Ecosystem
Score Breakdown
356 stars → growing community
Last commit 17d ago → recently updated
1/1 issues closed → responsive maintainer
2 contributors → solo project
No dependents → no downstream usage
Weights: Freshness 20% · Issue Health 20% · Dependents 22% · Stars 10% · Contributors 8% · How we score →
Badge all embed codes →
[](https://agentrank-ai.com/tool/PatrikFehrenbach--h1-brain/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge) <a href="https://agentrank-ai.com/tool/PatrikFehrenbach--h1-brain/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge"><img src="https://agentrank-ai.com/api/v1/badge/PatrikFehrenbach--h1-brain" alt="AgentRank"></a> Matched Queries
From the README
# h1-brain An MCP server that connects your AI assistant to HackerOne. It pulls your bug bounty history, program scopes, and report details into a local SQLite database, then exposes tools that let any MCP-compatible client (Claude Desktop, Claude Code, etc.) search, analyze, and build on your past work. It also ships with a **pre-built database of 3,600+ publicly disclosed bounty-awarded reports** from the HackerOne community — full vulnerability write-ups, weakness types, and bounty amounts. The AI uses both your personal data and public knowledge to generate attack briefings. The primary tool, `hack(handle)`, generates a full hacking session briefing in a single call: fresh scope from the API, your past findings, public disclosures for that program, weakness patterns, untouched assets, and suggested attack vectors — all formatted as actionable instructions that put the AI in offensive mode. ## How It Works For a full walkthrough, check out the three-part **[Bug Bounty Goldfish]Read full README on GitHub →
Get the weekly AgentRank digest
Top movers, new tools, ecosystem insights — straight to your inbox.