h1-brain

What it does

Integrates AI assistants with HackerOne, pulling personal bug bounty history, program scopes, and report details into a local SQLite database. It includes a pre-built database of 3,600+ publicly disclosed bounty reports to help the AI identify vulnerability patterns and suggest attack vectors.

Tools

• hack(handle): Generates a full hacking session briefing including scope, past findings, and suggested attack vectors.
• search_reports: Search personal rewarded reports by title, program, weakness, or severity.
• get_report: Retrieves full details and write-ups for a specific report.
• search_disclosed_reports: Full-text search across 3,600+ public bounty-awarded reports.
• fetch_rewarded_reports: Syncs personal bounty-awarded reports from the HackerOne API.
• fetch_programs: Syncs accessible programs from the API.

Installation

Requires Python 3.10+ and a HackerOne API token.

Claude Desktop Config:

{
  "mcpServers": {
    "h1-brain": {
      "command": "/path/to/h1-brain/venv/bin/python",
      "args": ["/path/to/h1-brain/server.py"],
      "env": {
        "H1_USERNAME": "your_username",
        "H1_API_TOKEN": "your_token"
      }
    }
  }
}

Supported hosts

• claude