Awesome Bugbounty Mcp

🔎 Awesome MCP Servers for Bug Bounty

A focused, no-noise list of **Model Context Protocol (MCP)** servers for real bug bounty work: recon, crawling, evidence capture, enrichment, code/secret OSINT, and mobile analysis.

Contents

• 🔭 - Recon & Internet Intel
• 🕷️ - Crawling, Fetching & Evidence
• 🧪 - Enrichment & Triage
• 🧑‍💻 - Code & Secrets OSINT
• 📱 - Mobile & APK Analysis
• 🛠️ - Orchestration
• 📬 - Contact

🔭 Recon & Internet Intel

• mcp-recon - Conversational recon for domains, IPs, and ASNs. Turns plain questions into targeted HTTP/ASN checks.
• Shodan MCP - Map exposed hosts and services and pivot on CVEs from Shodan results.
• Censys MCP - Enumerate hosts, certs, and services across the internet map with Censys Search.

🕷️ Crawling, Fetching & Evidence

• Firecrawl MCP - Crawl and scrape pages, returning structured content for diffing and analysis.
• Screenshot Website MCP - Fast, headless screenshots (auto-tiling) for crisp PoC evidence.
• Fetch MCP (official) - Lightweight HTML-to-Markdown fetcher when you do not need a full browser.

🧪 Enrichment & Triage

• VirusTotal MCP - Lookups for URLs, files, IPs, and domains with relationship context.
• CVE-Search MCP - Query vendors, products, recent updates, or specific CVE IDs.

🧑‍💻 Code & Secrets OSINT

• **[GitHub MCP (remote)](https://github.com/github/github-mcp-ser