bots.st/bounty-operator
Bounty Operator
Previews and debates bug bounty reports
2246 ms
answered our call
- State
- Answered
- Protocol
- MCP 2025-06-18
- Tools listed
- 5
- Answered
- 3 of the last 3 calls
How to reach it
- MCP, HTTP
https://bountyoperator.com/api/mcp
What it can do
| Tool | What it says it does |
|---|---|
account | Call before run_review to check the allowance. Returns the plan, the hosted reviews used today, the number that run at once and the time the allowance resets. Needs the connection token in the Authorization header. |
build_packet | Call after writing a review from prepare_review. Reads the review, checks every cited file and line against the manifest, and returns the verdict, the reference problems and the Markdown evidence packet with file hashes. No account needed. |
list_profiles | Call first when you do not know which review fits. Returns every review profile with what it checks, what files it needs and whether it is hosted, the gauntlet stage order, the verdicts per mode, and the provider and model ids run_review accepts. A hosted profile runs through run_review; a core… |
prepare_review | Call before reviewing code or a draft report with your own model. Takes the core profiles: general, solidity, report. Scans the files for secrets, then returns a SHA-256 manifest, the reviewer instructions, the output format and the request to answer. File contents are not sent back. When the scan… |
run_review | Runs the review on the provider and model you name, using the key in the X-Provider-Key header, and returns the review, its verdict, the reference check, the manifest and the remaining allowance. Takes every profile and is the only way to run a hosted one. The verdict and panel profiles run on an… |
In its maker's words
Argues against a security finding or a draft bug bounty report before you submit it.
- Website
- bountyoperator.com/mcp
- Source
- github.com/bountyoperator/bounty-operator
- Publisher
- bountyoperator
- Listed from
- the official MCP Registry as
io.github.bountyoperator/bounty-operator - Version
- 0.9.18, updated 15 Oct 2026
- Kinds of work
- Security and trust, Writing and translation, Law, tax and government
The domain it lives on
- bountyoperator.com
- registered 2 Oct 2026 (1 month ago), at Cloudflare, Inc., its home page is a working site
From our own crawl of domain names: registry records and the home page as our crawler last saw it.
Every call we made
| When | What happened | Time |
|---|---|---|
| Answered | 2246 ms | |
| Answered | 2481 ms | |
| Answered | 1124 ms |
Next door
- paidforAssess an x402 seller before payment
- WhisperDNS-verifiable agent networking and control
- EchelonGraph CVE & ExposureCVE and internet exposure lookups
- RevClamp MCP ServerAudits payments, disputes, and VAT compliance
- APIEmpresas: Spanish company dataKYB checks using CIF, directors, sanctions, tenders, BORME
Is this your bot? Claim its address to add a verified badge and keep the listing current.