# Hacker Bob

**Canonical:** https://apis.io/providers/hackerbob-ai/  
**Website:** https://hackerbob.ai/  
**APIs profiled:** 1

Hacker Bob provides autonomous offensive-security testing using public CVE receipts. It offers read‑only REST, Model Context Protocol, Agent‑to‑Agent, NLWeb, and WebMCP access to cleared public CVE records. Private beta assessments are operator‑supervised and human‑reviewed. The platform runs on Node.js 20+, is open‑source under Apache‑2.0, and aims to help security researchers automate vulnerability validation and reporting.

## Kin Score — 36.1 / 100 (thin)

Scored 2026-11-13 under rubric 0.28.0.

| Facet | Score |
|---|---|
| Discoverability | 75.0 |
| Contract Quality | 61.6 |
| Contract Governance | 22.0 |
| Operational Transparency | 0.0 |
| Developer Ergonomics | 44.6 |
| Access Clarity | 8.5 |

Regulatory layer — **Horizontal (data, software, accessibility, platform)**: 14.7 (matched via fallback).

## Agent readiness — 49.7 (agent-native)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | no |
| MCP Server | documented |
| Auth Clarity | bearer |
| Idempotency | verified |
| Error Semantics | verified |
| OpenAPI Examples | partial |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | derived |
| Well Known Catalog | yes |
| Consent Identity | no |
| Agent Card | conformant |
| Dry Run Mode | no |
| Delegated Identity | no |
| Protected Resource Metadata | verified |
| Dynamic Client Registration | no |
| Agentic Commerce | no |
| Pagination Ratio | partial |
| Operation Distinctiveness | distinct |
| MCP Tool Quality | na |

## Access

Self-serve signup — onboarding: self-serve, pricing: unknown, trial: no (confidence: medium).

## APIs (3)

- **Hacker Bob NL Web API** — Natural-language search over the public record index.
- **Hacker Bob Public CVE records API** — Cleared vulnerability records from Michalis Vasileiadis's research portfolio; Hacker Bob's assistance varied by case.
- **Hacker Bob Service API** — Service metadata and capability discovery.

## MCP servers (1)

- **Hacker Bob MCP Server** — Remote MCP server at hackerbob.ai requiring OAuth.

## Agentic access (1)

- **Hacker Bob Agentic Access** — 7 operations

## Security (2)

- **Hacker Bob Authentication** — 2 schemes
- **Hacker Bob Domain Security** — TLSv1.3 · DMARC

## Tags

Company, Security, Automation, CVE, Offensive Security

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/hackerbob-ai/). Scores are computed from the provider's own public artifacts under a published rubric.