h1-brain

What's in the stack

AI

MCP SDK

Detected from declared dependencies. A listed package means it's installed, not necessarily fully wired up.

What the README says you get

• Data
  Local SQLite storagepulls your bug bounty history, program scopes, and report details into a local SQLite database
• Other
  HackerOne MCP serverAn MCP server that connects your AI assistant to HackerOne
• Other
  Attack briefing toolgenerates a full hacking session briefing in a single call
• Other
  Untouched asset detectionIdentifies untouched bounty-eligible assets
• Other
  Suggested attack vectorsSuggests attack vectors based on weaknesses that paid elsewhere
• Other
  Public disclosed reports DBpre-built database of 3,600+ publicly disclosed bounty-awarded reports
• Other
  Report searchSearch your rewarded reports by title, program, weakness type, or severity
• Other
  Report thread timelineFull comment/activity timeline (oldest→newest) for a report
• Other
  Program searchSearch your stored programs
• Other
  Scope searchSearch in-scope assets across programs
• Other
  Attachment download URLsFresh download URLs for report attachments
• Other
  Disclosed report searchFull-text search across public reports — titles and vulnerability write-ups
• Other
  Report syncSync your bounty-awarded reports from the API
• Other
  Markdown report exportexport one markdown file per report

Extracted from the kit's README by a local AI model (deepseek-flash) on Oct 19, 2026. Every item is checked against an exact README quote. A README claim is the maker's description, not something we tested.