
Taskbounty Mcp Server
Post, fund, and manage GitHub bug bounties—and run Autopilot—from your agent when you want outside eyes on security before or after launch.
Overview
taskbounty-mcp-server is an MCP server for the Ship phase that lets your agent post, fund, and manage GitHub bug bounties and Autopilot on Task Bounty with crypto payouts.
What is this MCP server?
- Create bounty drafts, fund bounties, and award or cancel from MCP tools
- Autopilot enable and bounty solving workflows tied to GitHub issues and PRs
- Read coverage and submission status without leaving the agent
- taskbounty_login for browser device login when API key is not set
- Crypto-paid bounties via Task Bounty platform (tb_live_* API keys)
- Server version 0.4.0
- Default API base https://www.task-bounty.com/api/v1
- stdio npm identifier taskbounty-mcp-server
What problem does it solve?
You know you should run bounties but juggling the dashboard, GitHub issues, and payout flow breaks your solo shipping rhythm.
Who is it for?
Indie maintainers who want agent-assisted bounty ops on GitHub repos with optional Autopilot before or right after launch.
Skip if: Builders who need enterprise compliance programs, fiat-only payouts, or automated static analysis with no human researchers.
What do I get? / Deliverables
After registration and API key or login, your agent can draft, fund, track, and award bounties from the repo context you already work in.
- Bounty drafts and funded bounties on Task Bounty
- Submission and coverage status pulled into agent sessions
- Autopilot and award/cancel actions when using write tools
Recommended MCP Servers
Journey fit
How it compares
GitHub bounty and Autopilot MCP, not a local semgrep skill or generic code-review checklist.
Common Questions / FAQ
Who is taskbounty-mcp-server for?
Solo builders and small teams who ship on GitHub and want their agent to operate Task Bounty bounties and security coverage checks.
When should I use taskbounty-mcp-server?
Use it in Ship when you are funding fixes, enabling Autopilot, or tracking submissions ahead of or just after a public launch.
How do I add taskbounty-mcp-server to my agent?
Add the npm stdio server taskbounty-mcp-server in MCP config, set TASKBOUNTY_API_KEY from the Task Bounty dashboard or run taskbounty_login for device auth.