# BugbountiesMCP

A comprehensive list of Model Context Protocol (MCP) servers that can be used for bug bounties, penetration testing, and information security research.

## Purpose

This repository serves as a central resource for security professionals looking to utilize MCP servers in their bug bounty hunting, penetration testing, and overall information security work. MCP servers can be powerful tools for security research when used ethically and responsibly.

## MCP Servers List

| Server Name | URL | Features | Security Use Cases |
|-------------|-----|----------|-------------------|
| Browser MCP | https://browsermcp.io | Browser-based message control capabilities | Web application security testing, client-side vulnerability research |
| Burp MCP Server | https://portswigger.net/bappstore/9952290f04ed4f628e624d0aa9dccebc | Extension for Burp Suite, message control protocol functionality | Enhanced web security testing, API security assessment, request manipulation |
| CLI MCP Server | https://github.com/MladenSU/cli-mcp-server | Command line interface with secure execution and customizable security policies | Controlled CLI access for security testing, secure command execution |
| GitHub MCP Server | https://github.com/github/github-mcp-server | GitHub's official MCP Server for repository management | Code security scanning, repository vulnerability assessment, security workflow automation |
| MCP for Security | https://github.com/StanLeyJ03/mcp-for-security | Collection of MCP servers for popular security tools like SQLMap, FFUF, NMAP, Masscan | Integrated security testing, penetration testing workflows |
| BurpMCP | https://github.com/swgee/BurpMCP | Burp Suite Extension with MCP Server | Enhanced application security testing, vulnerability research, bug bounty hunting with AI assistance |
| MCP Inspector | https://github.com/modelcontextprotocol/inspector | Visual testing tool for MCP servers | Debugging MCP server implementations, testing security scenarios |
| SecOps MCP | https://github.com/securityfortech/secops-mcp | All-in-one security testing toolbox | Pentesting, bug bounty hunting, threat hunting through a single MCP interface |
| CVE-Search MCP | https://github.com/roadwy/cve-search_mcp | MCP server for querying the CVE-Search API | Comprehensive access to CVE database, threat intelligence |
| MCP-Recon | https://github.com/nickpending/mcp-recon | Conversational recon interface powered by httpx and asnmap | Security reconnaissance, attack surface discovery |
| Example MCP | https://example.com/mcp | Code analysis, vulnerability detection | Finding code vulnerabilities, analyzing security patterns |
| Security MCP | https://security-mcp.example.com | Threat modeling, exploit generation | Penetration testing assistance, vulnerability research |

## How to Contribute

If you know of any additional MCP servers that are useful for security research:
1. Fork this repository
2. Add the server details to the list
3. Submit a pull request with a brief description of the server's capabilities

## Ethical Guidelines

All servers listed in this repository should only be used for legitimate security research, with proper authorization, and in compliance with applicable laws and regulations. This repository does not endorse using these tools for any malicious or unauthorized activities.

## Disclaimer

The maintainers of this repository are not responsible for how these tools are used. Always ensure you have proper authorization before conducting any security testing.

## License

This project is licensed under the MIT License - see the LICENSE file for details.

## Resources

### MCP Development Tools
- [MCP Inspector](https://github.com/modelcontextprotocol/inspector): Visual testing tool for debugging MCP servers
- [MCPTools](https://github.com/f/mcptools): Command-line interface for interacting with MCP servers

### Bug Bounty Platforms
- [HackerOne](https://hackerone.com/)
- [Bugcrowd](https://www.bugcrowd.com/)
- [Intigriti](https://www.intigriti.com/)
- [YesWeHack](https://www.yeswehack.com/)