{"id":28938213,"url":"https://github.com/hacker0x01/hackerone-graphql-mcp-server","last_synced_at":"2026-03-11T13:17:50.654Z","repository":{"id":298892414,"uuid":"1000921165","full_name":"Hacker0x01/hackerone-graphql-mcp-server","owner":"Hacker0x01","description":"MCP server for the HackerOne GraphQL API","archived":false,"fork":false,"pushed_at":"2025-12-03T12:51:18.000Z","size":392,"stargazers_count":13,"open_issues_count":1,"forks_count":3,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-01-19T19:58:04.814Z","etag":null,"topics":["graphql","hackerone","mcp"],"latest_commit_sha":null,"homepage":"https://hub.docker.com/r/hackertwo/hackerone-graphql-mcp-server","language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Hacker0x01.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2025-06-12T14:23:11.000Z","updated_at":"2026-01-18T09:36:49.000Z","dependencies_parsed_at":"2025-06-13T13:29:10.782Z","dependency_job_id":"b315f5b7-1cee-48c7-a320-6c43bb9cbb9c","html_url":"https://github.com/Hacker0x01/hackerone-graphql-mcp-server","commit_stats":null,"previous_names":["hacker0x01/hackerone-graphql-mcp-server"],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/Hacker0x01/hackerone-graphql-mcp-server","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Hacker0x01%2Fhackerone-graphql-mcp-server","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Hacker0x01%2Fhackerone-graphql-mcp-server/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Hacker0x01%2Fhackerone-graphql-mcp-server/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Hacker0x01%2Fhackerone-graphql-mcp-server/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Hacker0x01","download_url":"https://codeload.github.com/Hacker0x01/hackerone-graphql-mcp-server/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Hacker0x01%2Fhackerone-graphql-mcp-server/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30382669,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-11T12:49:11.341Z","status":"ssl_error","status_checked_at":"2026-03-11T12:46:41.342Z","response_time":84,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["graphql","hackerone","mcp"],"created_at":"2025-06-22T22:07:20.797Z","updated_at":"2026-03-11T13:17:50.648Z","avatar_url":"https://github.com/Hacker0x01.png","language":"Shell","funding_links":[],"categories":[],"sub_categories":[],"readme":"# HackerOne GraphQL MCP Server\n\nA Docker image that provides access to HackerOne's GraphQL API through the Model Context Protocol (MCP).\n\n**Supported MCP transport types**: Currently only stdio transport is supported. Please file an issue if you require [other transports](https://modelcontextprotocol.io/docs/concepts/transports#built-in-transport-types).\n\n**Multi-Architecture Support**: This image supports both Intel/AMD (amd64) and Apple Silicon (arm64) architectures.\n\n**Built on Apollo MCP Server**: This project is a thin wrapper around the upstream [Apollo MCP Server](https://github.com/apollographql/apollo-mcp-server), which exposes GraphQL operations as MCP tools.\n\n## Quick Start\n\n1. **Run with an MCP client**:\n   ```sh\n   docker run -i --rm \\\n     -e ENDPOINT=\"https://hackerone.com/graphql\" \\\n     -e TOKEN=\"\u003cyour_base64_encoded_token\u003e\" \\\n     -e MUTATION_MODE=\"none\" \\\n     hackertwo/hackerone-graphql-mcp-server:1.0.7\n   ```\n\n## Docker Image Tags\n\n- **`latest`**: Latest stable release (only updated on version releases)\n- **`dev-main`**: Development builds from main branch\n- **`1.x.x`**: Specific version releases\n- **`pr-\u003cref\u003e`**: Pull request builds\n\n## Environment Variables\n\n| Variable                     | Description                                                                                                                                                             | Default                         |\n| ---------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------- |\n| `ENDPOINT`                   | GraphQL endpoint URL                                                                                                                                                    | `https://hackerone.com/graphql` |\n| `TOKEN`                      | Base64 encoded API token in format: `base64(username:api_key)`                                                                                                          | -                               |\n| `MUTATION_MODE`              | Controls which mutations are allowed:\u003cbr/\u003e• `none`: No mutations allowed\u003cbr/\u003e• `explicit`: Only explicitly defined mutations allowed\u003cbr/\u003e• `all`: All mutations allowed | `none`                          |\n| `DISABLE_TYPE_DESCRIPTION`   | If set to `true`, tools will have no type descriptions (e.g. \"The returned value has type ...\")                                                                         | `false`                         |\n| `DISABLE_SCHEMA_DESCRIPTION` | If set to `true`, tools will have no schema description                                                                                                                 | `false`                         |\n\n## Generating an API Token\n\n### Option 1: Using the included script (recommended)\n1. Visit https://hackerone.com/settings/api_token/edit to generate an API key\n2. Run the token generation script: `./scripts/generate_token.sh`\n   This will prompt for your username and API key, then automatically encode and copy the token to your clipboard.\n3. Use the resulting string as your TOKEN value\n\n### Option 2: Manual encoding\n1. Visit https://hackerone.com/settings/api_token/edit to generate an API key\n2. Encode as: `echo -n \"username:api_key\" | base64`\n3. Use the resulting string as your TOKEN value\n\n## Example config in Flowise\n\n1. Go to an Agent node\n2. Go to tools\n3. Select custom MCP\n4. Put the following in the MCP parameters:\n\n```json\n{\n    \"command\": \"/usr/local/bin/docker\",\n    \"args\": [\n        \"run\",\n        \"-i\",\n        \"--rm\",\n        \"-e\",\n        \"ENDPOINT=https://hackerone.com/graphql\",\n        \"-e\",\n        \"TOKEN=\u003cyour_base64_encoded_token\u003e\",\n        \"-e\",\n        \"MUTATION_MODE=none\",\n        \"hackertwo/hackerone-graphql-mcp-server:1.0.7\"\n    ]\n}\n```\n\n## Example config in editor (Zed)\n\n```json\n{\n  \"context_servers\": {\n    \"hackerone-graphql-mcp-server\": {\n      \"source\": \"custom\",\n      \"command\": \"/usr/local/bin/docker\",\n      \"args\": [\n        \"run\",\n        \"-i\",\n        \"--rm\",\n        \"-e\",\n        \"ENDPOINT=https://hackerone.com/graphql\",\n        \"-e\",\n        \"TOKEN=\u003cyour_base64_encoded_token\u003e\",\n        \"-e\",\n        \"MUTATION_MODE=none\",\n        \"hackertwo/hackerone-graphql-mcp-server:1.0.7\"\n      ]\n    }\n  }\n}\n```\n\n## Notes\n\n- The Docker container is designed to be piped into an MCP-compatible client\n- Running the container directly will result in an error as it expects an MCP client connection\n- The `-i` flag is required to maintain standard input for the stdio transport\n- The `schema.graphql` in this repository may become outdated over time, you can download the latest one from HackerOne at [https://hackerone.com/schema.graphql](https://hackerone.com/schema.graphql)\n\n## Development\n\n### Creating a Release\n\nTo create a new release:\n\n1. Create a [new release in GitHub](https://github.com/Hacker0x01/hackerone-graphql-mcp-server/releases/new).\n\n2. GitHub Actions will automatically:\n   - Build multi-architecture images (amd64, arm64)\n   - Push to Docker Hub with appropriate tags\n   - Update the `latest` tag\n\n### Manual Build (Local Development)\n\nFor local development and testing:\n\n```sh\n# Setup buildx\ndocker buildx create --name multiarch --driver docker-container --use\ndocker buildx inspect --bootstrap\n\n# Build and push the image\nbin/build\n\n# Clean up\ndocker buildx rm multiarch\n```\n\n### Debugging\n\n1. **Run MCP inspector:**\n   ```sh\n   npx @modelcontextprotocol/inspector\n   ```\n\n3. **Connect to the HackerOne MCP server from the web interface:**\n\n   Command:\n   ```sh\n   /usr/local/bin/docker\n   ```\n   \n   Arguments:\n   \n   ```sh\n   run -i --rm -e ENDPOINT=http://host.docker.internal:3000/graphql -e TOKEN=\u003cTOKEN\u003e -e ALLOW_MUTATIONS=all hackertwo/hackerone-graphql-mcp-server:1.0.5\n   ```\n\n## Issues \u0026 Contributions\n\n- **HackerOne-specific behavior, configuration, token handling, schema quirks, mutation allow-listing, etc.:** open an issue in this repository.\n- **Generic MCP behavior, transports, protocol details, or GraphQL tool exposure mechanics:** consider checking/filing upstream in **apollographql/apollo-mcp-server**.\n\n## Licensing Notes\n\nThis project depends on [Apollo MCP Server](https://github.com/apollographql/apollo-mcp-server), which is licensed under the **MIT License**.  \nYour use of this image includes use of Apollo MCP Server under its license; please review the upstream LICENSE.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fhacker0x01%2Fhackerone-graphql-mcp-server","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fhacker0x01%2Fhackerone-graphql-mcp-server","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fhacker0x01%2Fhackerone-graphql-mcp-server/lists"}