Can the hosted Hacker Bob interfaces run security assessments?

Public hosted tools are read-only. Authenticated workspace tools can prepare approved scope and submit it to a managed queue, but target execution remains in a separate operator-supervised runtime during private beta.

Checking your session

Public vulnerability record

About Hacker Bob

17 Common Vulnerabilities and Exposures (CVE) IDs across 9 open-source projects.

Q: How does an authorized operator run Hacker Bob?

Install the local runtime in the authorized project with npx -y hacker-bob@latest install ., then restart the selected MCP host.

Hacker Bob is an autonomous offensive-security agent for authorized targets. Private beta assessments are operator-supervised and human-reviewed.

Cleared public records

The public record index links published Common Vulnerabilities and Exposures records to upstream sources. Assigned identifiers without public records remain unlinked.

Agent and developer interfaces

Public read-only REST, Model Context Protocol, Agent2Agent, NLWeb, and WebMCP interfaces expose the same cleared records and capability metadata.

Assessment execution boundary

The hosted interfaces cannot start assessments, interact with targets, spend credits, or access private workspaces. Install the local runtime for explicitly authorized security testing.

Agent interface questions

Can the hosted interfaces run security assessments?

No. They are read-only public-record services and cannot interact with targets.

How does an authorized operator run Hacker Bob?

Install the local runtime inside the authorized project, then restart the selected Model Context Protocol host.