# Hacker Bob public records (io.github.bobnetsec/hacker-bob-public-records): tool descriptions scored

- tools/list taken: 2026-11-02 (UTC)
- From: [Official MCP Registry](https://registry.modelcontextprotocol.io/v0/servers/io.github.bobnetsec%2Fhacker-bob-public-records/versions/latest)
- Connected to: https://hackerbob.ai/mcp
- Homepage: https://hackerbob.ai/api-reference
- Repository: https://github.com/bobnetsec/www
- Scoring rules: v2
- Tools: 22
- Average: 46.7 / 100 (Cloudy)
- Near-identical pairs: 0

This page shows how Hacker Bob public records (io.github.bobnetsec/hacker-bob-public-records)'s tool descriptions scored, the issues found and the names of its tools and parameters. The descriptions are the server's own: read them where the copy came from.

Forecall asked the URL this server lists in the official MCP Registry for its tools/list once, on the date above, without calling any tool. The server may have changed since.

## Across the server

No server-wide issues.

## Tools

- `list_findings`: 27 / 100
  - Major: The description only restates the name (9 words).
  - Major: Says nothing about when to use it, or when not to.
  - Major: Arguments without a description: status, severity, assetId.
  - Minor: Says nothing about what it returns.
- `list_audit_events`: 37 / 100
  - Major: Says nothing about when to use it, or when not to.
  - Major: Arguments without a description: actor, action, fromAt, toAt.
  - Minor: Says nothing about what it returns.
- `list_assessments`: 38 / 100
  - Major: Says nothing about when to use it, or when not to.
  - Minor: Arguments without a description: includeArchived.
  - Minor: The meaning of the boolean argument includeArchived is unclear.
  - Minor: Says nothing about what it returns.
- `list_reports`: 38 / 100
  - Major: The description only restates the name (8 words).
  - Major: Says nothing about when to use it, or when not to.
  - Minor: Says nothing about what it returns.
- `launch_assessment`: 39 / 100
  - Major: Says nothing about when to use it, or when not to.
  - Major: Arguments without a description: assessmentId, idempotencyKey.
  - Minor: The description mentions none of its 3 or more arguments.
  - Minor: Says nothing about what it returns.
  - Minor: Required identifiers whose description does not say where the value comes from: assessmentId. Name the tool or the place that returns it, or models look it up first.
- `begin_domain_authorization`: 40 / 100
  - Major: Says nothing about when to use it, or when not to.
  - Major: Arguments without a description: label, method, idempotencyKey.
  - Minor: Says nothing about what it returns.
- `get_asset`: 41 / 100
  - Major: The description only restates the name (9 words).
  - Major: Says nothing about when to use it, or when not to.
  - Minor: Arguments without a description: assetId.
  - Minor: Required identifiers whose description does not say where the value comes from: assetId. Name the tool or the place that returns it, or models look it up first.
- `cancel_assessment`: 42 / 100
  - Major: Says nothing about when to use it, or when not to.
  - Major: Arguments without a description: assessmentId, idempotencyKey.
  - Minor: The description mentions none of its 3 or more arguments.
  - Minor: Says nothing about what it returns.
  - Minor: Required identifiers whose description does not say where the value comes from: assessmentId. Name the tool or the place that returns it, or models look it up first.
- `check_domain_authorization`: 42 / 100
  - Major: Says nothing about when to use it, or when not to.
  - Major: Arguments without a description: authorizationId, idempotencyKey.
  - Minor: The description mentions none of its 3 or more arguments.
  - Minor: Says nothing about what it returns.
  - Minor: Required identifiers whose description does not say where the value comes from: authorizationId. Name the tool or the place that returns it, or models look it up first.
- `get_finding`: 45 / 100
  - Major: Says nothing about when to use it, or when not to.
  - Minor: Arguments without a description: findingId.
  - Minor: Required identifiers whose description does not say where the value comes from: findingId. Name the tool or the place that returns it, or models look it up first.
- `get_workspace`: 45 / 100
  - Major: The description only restates the name (8 words).
  - Major: Says nothing about when to use it, or when not to.
- `list_assets`: 48 / 100
  - Major: Says nothing about when to use it, or when not to.
  - Minor: Says nothing about what it returns.
- `prepare_assessment`: 48 / 100
  - Major: Arguments without a description: assetId, depth, coverage, coverage.mode, coverage.rules, interactionPolicy, boundaries, idempotencyKey.
  - Minor: The description mentions none of its 3 or more arguments.
  - Minor: Required identifiers whose description does not say where the value comes from: assetId. Name the tool or the place that returns it, or models look it up first.
- `get_assessment`: 49 / 100
  - Major: Says nothing about when to use it, or when not to.
  - Minor: Arguments without a description: assessmentId.
  - Minor: Required identifiers whose description does not say where the value comes from: assessmentId. Name the tool or the place that returns it, or models look it up first.
- `list_public_cve_records`: 49 / 100
  - Major: Says nothing about when to use it, or when not to.
  - Minor: Says nothing about what it returns.
- `search_public_cve_records`: 49 / 100
  - Major: Says nothing about when to use it, or when not to.
  - Minor: Says nothing about what it returns.
- `list_workspaces`: 52 / 100
  - Major: Says nothing about when to use it, or when not to.
  - Minor: Says nothing about what it returns.
- `get_report`: 54 / 100
  - Minor: Arguments without a description: reportId.
  - Minor: Required identifiers whose description does not say where the value comes from: reportId. Name the tool or the place that returns it, or models look it up first.
- `get_credit_summary`: 55 / 100
  - Major: Says nothing about when to use it, or when not to.
- `get_my_account`: 59 / 100
  - Major: Says nothing about when to use it, or when not to.
- `get_capabilities`: 64 / 100
- `get_public_cve_record`: 66 / 100
  - Minor: Required identifiers whose description does not say where the value comes from: recordId. Name the tool or the place that returns it, or models look it up first.

Is your server listed here and you would rather it were not? Email support@forecall.dev, and we will take it off within 7 days.

[All scored servers](https://forecall.dev/en/servers)