Vibe Coding Discoverbug-bounties
View on GitHub⚔️ Community maintained directory, MCP and API of 3,000+ active bug bounty programs and VDPs
Community-maintained directory of 3,000+ bug bounty and vulnerability disclosure programs, shipped as an MCP server, REST API and web app. The TypeScript MCP server lets agents search programs, policies and disclosure contacts for security research.
Use Cases
Let an AI agent look up which companies run bug bounty programsFind responsible-disclosure contacts and policy URLs for a vendorQuery 3,000+ VDP/bounty programs over MCP or REST for security workflowsFilter programs by reward type (cash, swag, shout-out) during reconSubmit new programs or removal requests to the community directoryBuild security automation that needs an up-to-date program database
Built With
- Language
- TypeScript
- Frameworks
- Model Context Protocol (MCP) · Astro · Svelte
Tags
bug-bounty · security · mcp-server · responsible-disclosure · vulnerability-disclosure · api · directory · curated-list · ai-security · typescript · agent-tools · security-research