hackerbob.ai exposes read-only public records plus authenticated workspace tools that prepare authorized scope and submit it to a managed queue. Target execution remains in a separate, operator-supervised runtime during private beta.
Public records REST API
The versioned public API lists, retrieves, and searches cleared Hacker Bob Common Vulnerabilities and Exposures records. It requires no credential and returns JSON.
Every operation is read-only. The OpenAPI 3.1 contract defines operation identifiers, request parameters, response schemas, cursor pagination, and typed error responses.
curl --fail --silent --show-error https://hackerbob.ai/api/v1/cve-records
Hosted MCP server
Without authentication, the Streamable HTTP MCP endpoint exposes read-only tools and resources for public records, capability metadata, and agent instructions.
Authenticated agents can bind to one workspace, prove control of an asset, prepare an immutable assessment, obtain exact human approval, submit that scope to Hacker Bob's managed queue, and read state, findings, and released reports. Submission is a managed handoff, not unattended target execution.
curl --fail --silent --show-error https://hackerbob.ai/mcp
Natural-language search and browser tools
The /ask endpoint provides NLWeb-style JSON search over the public record index and supports Server-Sent Events when requested.
Browsers with WebMCP support receive the same three read-only tools. Other browsers continue to use the ordinary site.
JavaScript SDK and contract sandbox
The zero-dependency JavaScript SDK wraps the public REST operations as an ECMAScript module and publishes TypeScript declarations.
The contract sandbox returns deterministic interface metadata and example requests. It stores no data, reads no private workspace, and cannot execute assessments.
Agent Plugin and structured discovery
The Agent Plugin manifest connects two reusable Agent Skills to the hosted read-only MCP server.
Scoped llms.txt files separate documentation, API, and developer resources. The Schema Map points crawlers to the same schema.org graph served in the site HTML.
Install the assessment runtime
Run the installer from the root of a project you are authorized to assess. It writes the runtime into the project and registers the selected MCP host.
The installer supports Claude Code, Codex, Kimi CLI, and generic MCP clients. Restart the host after installation so it can discover the local server.
npx -y hacker-bob@latest install .
Execution boundary
Public REST, NLWeb, and WebMCP tools are read-only and cannot access private workspaces or interact with targets. Authenticated hosted tools can prepare and submit an explicitly approved scope to the managed queue.
During private beta, a Hacker Bob operator verifies scope, runs the separate assessment runtime, reviews evidence, and releases the report. Public access to records is never authorization for security testing.
Machine-readable surfaces