servers / hacker-bob

hacker-bob MCP server

communitystdiolocalunknownhealthy

A local MCP runtime that attacks what you own and only reports what it proved. 17 CVEs across 9 projects came out of this repo. Install: npx -y hacker-bob@latest install /path/to/project, then run /bob-evaluate target.com

Is it safe?Setup guide Alternatives Claim this server

01Tools · 0

Tools require a live tools/list handshake. For local/stdio servers that runs in a sandbox (gated off until configured); remote servers are probed directly.

02Install & source

npx -y hacker-bob@latest

npx

npx -y hacker-bob-cc@latest

npx

npx -y hacker-bob-codex@latest

npx

npx -y hacker-bob-kimi@latest

npx

repohttps://github.com/vmihalis/hacker-bob
homepagehttps://hackerbob.ai
licenseApache-2.0
adoption97 stars · 15 forks

05Provenance & freshness

sourcesGitHub repo search [p4]

last_checked2026-08-16 17:54Z

next_check2026-08-17 00:08Z

cadenceevery 6h

verifiedhandshake:failed metadata:passed handshake:failed metadata:passed handshake:failed metadata:passed metadata:passed

index_statusindex — 7 unique facts >= 5

06Badge

Add the “as seen on MCPExplorer” badge to your README.

[![hacker-bob MCP — as seen on mcpexplorer.com](https://mcpexplorer.com/badge/hacker-bob.svg)](https://mcpexplorer.com/servers/hacker-bob)

Next step

This is one server. A loadout combines the right servers, governance, and proven plays for a whole job — assembled deliberately, not tool-dumped.

Explore loadouts →