H1 Brain MCP Server

An MCP server that connects your AI assistant to HackerOne. It pulls your bug bounty history, program scopes, and report details into a local SQLite database, then exposes tools that let any…

Local serverstdio

What is the H1 Brain MCP Server?

H1 Brain is an MCP project maintained in the patrikfehrenbach/h1-brain repository. The maintainer describes its purpose as “An MCP server that connects your AI assistant to HackerOne. It pulls your bug bounty history, program scopes, and report details into a local SQLite…”. Read the project documentation for the complete scope.

Local setup

The project provides a local client configuration using /path/to/h1-brain/venv/bin/python. Follow the repository’s build and installation steps before copying it, and replace example paths with the paths on your own computer.

Configuration values

The example declares H1_USERNAME, H1_API_TOKEN. Secret-looking values have been replaced with placeholders. Required and optional labels are shown only when the documentation states them.

Source

Project documentation · Repository · Discovery listing. This profile records the public documentation checked on 2026-10-08.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

ToolWhat it does
fetch_rewarded_reportsSync your bounty-awarded reports from the API
fetch_programsSync your accessible programs

How to install the H1 Brain MCP Server

{
  "mcpServers": {
    "h1-brain": {
      "command": "/path/to/h1-brain/venv/bin/python",
      "args": [
        "/path/to/h1-brain/server.py"
      ],
      "env": {
        "H1_USERNAME": "your_hackerone_username",
        "H1_API_TOKEN": "YOUR_H1_API_TOKEN"
      }
    }
  }
}

From the project documentation. Replace placeholders and example paths before connecting.

Configuration

VariableDescriptionRequired
H1_USERNAMEDeclared in the maintainer’s client configuration.Check documentation
H1_API_TOKENDeclared in the maintainer’s client configuration.Check documentation