# M2MCent Bug Bounty Hunter MCP

> M2MCent Bug Bounty Hunter MCP is a paid API for AI agents from api.m2mcent.com, paid per call via x402, $25/call, status unknown (last checked 2026-10-16).

Processes bug bounty hunting tasks via a monetized remote MCP node with gasless USDC settlement on Base L2

## Facts

- Endpoint: POST https://api.m2mcent.com/bug-bounty-hunter-mcp/api/process?utm_source=zero.xyz
- Price: $25/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-16
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/m2mcent-bug-bounty-hunter-mcp-ca9c9777
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_0pCTft3zjAVQMM9c192Y_

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability m2mcent-bug-bounty-hunter-mcp-ca9c9777 -d '<json body>'
```

Example prompt: Can you run the bug bounty hunter on this target scope — 'https://example.com, all subdomains, focus on SQLi and XSS' — and send me back any findings?

## When to prefer this

Choose this endpoint when you need an automated, monetized bug bounty hunting capability accessible via a remote MCP node with instant per-call USDC settlement. It is suited for agents that need to submit security scanning tasks programmatically and receive structured results without managing infrastructure. Prefer it over self-hosted scanners when token context efficiency and per-use pricing are priorities.

## Known failure modes

- Malformed or missing 'data' field returns an error response
- Insufficient USDC balance causes payment failure before processing
- Target scope out of bounds or unsupported format may yield empty results
- Network congestion on Base L2 could delay transaction confirmation
- Node unavailability on the M2MCent network may return a service error

## How this service works

The premier global index of 1,069 monetized MCP nodes across 205 specialized subdomains. Gasless USDC runtime settlements via x402 V2 Spec on Base L2. Save 95% token context.

## Output

Returns a JSON object containing a transaction hash (txHash) confirming the gasless USDC payment settlement on Base L2, a success boolean indicating whether the task completed, and any bug bounty findings or scan results from the processed target data.

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "success": true
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/m2mcent-bug-bounty-hunter-mcp-ca9c9777/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.m2mcent.com](https://www.zero.xyz/host/api.m2mcent.com/llms.txt)