---
title: "Public records, managed assessment handoff, and local runtime."
description: "hackerbob.ai exposes read-only public records plus authenticated workspace tools that prepare authorized scope and submit it to a managed queue. Target execution remains in a separate, operator-supervised runtime during private beta."
canonical: "https://hackerbob.ai/developers.md"
last-updated: "2026-09-05"
---
# Public records, managed assessment handoff, and local runtime.

> hackerbob.ai exposes read-only public records plus authenticated workspace tools that prepare authorized scope and submit it to a managed queue. Target execution remains in a separate, operator-supervised runtime during private beta.

## Public records REST API

The versioned public API lists, retrieves, and searches cleared Hacker Bob Common Vulnerabilities and Exposures records. It requires no credential and returns JSON.

Every operation is read-only. The OpenAPI 3.1 contract defines operation identifiers, request parameters, response schemas, cursor pagination, and typed error responses.

```sh
curl --fail --silent --show-error https://hackerbob.ai/api/v1/cve-records
```

- [OpenAPI 3.1 specification](/openapi.json)
- [API catalog](/.well-known/api-catalog)
- [API health](/api/v1/health)
- [Capability metadata](/api/v1/capabilities)

## Hosted MCP server

Without authentication, the Streamable HTTP MCP endpoint exposes read-only tools and resources for public records, capability metadata, and agent instructions.

Authenticated agents can bind to one workspace, prove control of an asset, prepare an immutable assessment, obtain exact human approval, submit that scope to Hacker Bob's managed queue, and read state, findings, and released reports. Submission is a managed handoff, not unattended target execution.

```sh
curl --fail --silent --show-error https://hackerbob.ai/mcp
```

- [MCP discovery](/.well-known/mcp)
- [MCP server card](/.well-known/mcp/server-card.json)
- [Agent skills](/.well-known/agent-skills/index.json)

## Natural-language search and browser tools

The /ask endpoint provides NLWeb-style JSON search over the public record index and supports Server-Sent Events when requested.

Browsers with WebMCP support receive the same three read-only tools. Other browsers continue to use the ordinary site.

- [Search public records](/ask?query=netatalk)
- [WebMCP script](/webmcp.js)

## JavaScript SDK and contract sandbox

The zero-dependency JavaScript SDK wraps the public REST operations as an ECMAScript module and publishes TypeScript declarations.

The contract sandbox returns deterministic interface metadata and example requests. It stores no data, reads no private workspace, and cannot execute assessments.

- [JavaScript SDK guide](/sdk/index.md)
- [ECMAScript module](/sdk/hacker-bob.mjs)
- [TypeScript declarations](/sdk/hacker-bob.d.ts)
- [Contract sandbox](/api/v1/sandbox)

## Agent Plugin and structured discovery

The Agent Plugin manifest connects two reusable Agent Skills to the hosted read-only MCP server.

Scoped llms.txt files separate documentation, API, and developer resources. The Schema Map points crawlers to the same schema.org graph served in the site HTML.

- [Agent Plugin manifest](/plugin.json)
- [Agent Plugin MCP configuration](/mcp.json)
- [API-scoped agent guide](/api/llms.txt)
- [Documentation-scoped agent guide](/docs/llms.txt)
- [Developer-scoped agent guide](/developers/llms.txt)
- [Schema Map](/schemamap.xml)
- [schema.org feed](/feeds/schema-org.jsonl)

## Install the assessment runtime

Run the installer from the root of a project you are authorized to assess. It writes the runtime into the project and registers the selected MCP host.

The installer supports Claude Code, Codex, Kimi CLI, and generic MCP clients. Restart the host after installation so it can discover the local server.

```sh
npx -y hacker-bob@latest install .
```

- [npm package](https://www.npmjs.com/package/hacker-bob)
- [Source and documentation](https://github.com/vmihalis/hacker-bob)

## Execution boundary

Public REST, NLWeb, and WebMCP tools are read-only and cannot access private workspaces or interact with targets. Authenticated hosted tools can prepare and submit an explicitly approved scope to the managed queue.

During private beta, a Hacker Bob operator verifies scope, runs the separate assessment runtime, reviews evidence, and releases the report. Public access to records is never authorization for security testing.

## Machine-readable surfaces

- [Short agent guide](/llms.txt)
- [Full agent guide](/llms-full.txt)
- [Agent instructions](/agents.md)
- [Public receipt data](/receipts.json)
- [Agent resource catalog](/.well-known/ai-catalog.json)
- [Authentication posture](/auth.md)
- [Public API reference](/api-reference)
- [Agent Plugin manifest](/plugin.json)
- [Schema Map](/schemamap.xml)
- [JavaScript SDK](/sdk/index.md)

## Machine-readable alternative

- [This page as Markdown](https://hackerbob.ai/developers.md)
- [Agent index](https://hackerbob.ai/llms.txt)

Last revised 2026-09-05.