Security & Testing
daisycon.com
An MCP server that provides access to public bug bounty programs and lists available tools by category, supporting security testing and vulnerability research.
ENDPOINT 1
https://mcp.daisycon.com/advertiser/mcp
Known tools 0
No tool metadata was available in the registry cache.
CONNECT WITH APPROVAL
Client installation
Review this server and its permissions before adding it. Secret placeholders must be set locally.
Codex
~/.codex/config.toml
[mcp_servers.daisycon-com]
url = "https://mcp.daisycon.com/advertiser/mcp"
enabled = true
bearer_token_env_var = "MCP_BEARER_TOKEN"
Authentication is required. Replace the placeholder locally and never commit a secret.
Claude Code
.mcp.json
{
"mcpServers": {
"daisycon-com": {
"type": "http",
"url": "https://mcp.daisycon.com/advertiser/mcp",
"headers": {
"Authorization": "Bearer YOUR_BEARER_TOKEN"
}
}
}
}
Authentication is required. Replace the placeholder locally and never commit a secret.
Claude Desktop
Settings → Connectors → Add custom connector
Name: daisycon-com
Remote MCP URL: https://mcp.daisycon.com/advertiser/mcp
Add the URL as a custom connector, then complete its supported authorization flow. Claude Desktop remote connectors are configured in the UI.
Cursor
.cursor/mcp.json
{
"mcpServers": {
"daisycon-com": {
"url": "https://mcp.daisycon.com/advertiser/mcp",
"headers": {
"Authorization": "Bearer YOUR_BEARER_TOKEN"
}
}
}
}
Authentication is required. Replace the placeholder locally and never commit a secret.
Visual Studio Code
.vscode/mcp.json
{
"servers": {
"daisycon-com": {
"type": "http",
"url": "https://mcp.daisycon.com/advertiser/mcp",
"headers": {
"Authorization": "Bearer ${input:mcp-token}"
}
}
},
"inputs": [
{
"type": "promptString",
"id": "mcp-token",
"description": "daisycon-com bearer token",
"password": true
}
]
}
Authentication is required. Replace the placeholder locally and never commit a secret.
Generic MCP
Client-specific MCP configuration
{
"name": "daisycon-com",
"transport": "streamable-http",
"url": "https://mcp.daisycon.com/advertiser/mcp",
"headers": {
"Authorization": "Bearer YOUR_BEARER_TOKEN"
}
}
Authentication is required. Replace the placeholder locally and never commit a secret.
MCP Inspector
Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.
ENDPOINT 2
https://mcp.daisycon.com/publisher/mcp
Known tools 0
No tool metadata was available in the registry cache.
CONNECT WITH APPROVAL
Client installation
Review this server and its permissions before adding it. Secret placeholders must be set locally.
Codex
~/.codex/config.toml
[mcp_servers.daisycon-com]
url = "https://mcp.daisycon.com/publisher/mcp"
enabled = true
bearer_token_env_var = "MCP_BEARER_TOKEN"
Authentication is required. Replace the placeholder locally and never commit a secret.
Claude Code
.mcp.json
{
"mcpServers": {
"daisycon-com": {
"type": "http",
"url": "https://mcp.daisycon.com/publisher/mcp",
"headers": {
"Authorization": "Bearer YOUR_BEARER_TOKEN"
}
}
}
}
Authentication is required. Replace the placeholder locally and never commit a secret.
Claude Desktop
Settings → Connectors → Add custom connector
Name: daisycon-com
Remote MCP URL: https://mcp.daisycon.com/publisher/mcp
Add the URL as a custom connector, then complete its supported authorization flow. Claude Desktop remote connectors are configured in the UI.
Cursor
.cursor/mcp.json
{
"mcpServers": {
"daisycon-com": {
"url": "https://mcp.daisycon.com/publisher/mcp",
"headers": {
"Authorization": "Bearer YOUR_BEARER_TOKEN"
}
}
}
}
Authentication is required. Replace the placeholder locally and never commit a secret.
Visual Studio Code
.vscode/mcp.json
{
"servers": {
"daisycon-com": {
"type": "http",
"url": "https://mcp.daisycon.com/publisher/mcp",
"headers": {
"Authorization": "Bearer ${input:mcp-token}"
}
}
},
"inputs": [
{
"type": "promptString",
"id": "mcp-token",
"description": "daisycon-com bearer token",
"password": true
}
]
}
Authentication is required. Replace the placeholder locally and never commit a secret.
Generic MCP
Client-specific MCP configuration
{
"name": "daisycon-com",
"transport": "streamable-http",
"url": "https://mcp.daisycon.com/publisher/mcp",
"headers": {
"Authorization": "Bearer YOUR_BEARER_TOKEN"
}
}
Authentication is required. Replace the placeholder locally and never commit a secret.
MCP Inspector
Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.
ENDPOINT 3
https://mcp.daisycon.com/campaigns/mcp
MCP server metadata
- Name
- daisycon-campaigns
- Version
- 1.2.2
**0. No authentication:** This server is public: no `Authorization` header, no OAuth flow. Every tool is read-only program search; none changes state or returns account data. **1. Terminology:** The words "campaign" and "program" are interchangeable. This server uses "program" throughout. **2. Pagination:** Set `limit` to the smallest value covering the request: low `limit` = more calls, small responses; high `limit` = fewer calls, larger token cost per response. To page further, repeat the exact same call; same tool, same arguments; and add the returned `nextCursor` as `cursor` (`limit` is then ignored). A repeat call that adds _only_ `cursor` and drops any other argument returns error code `-32602` instead. Check `_meta.pagination` (`offset`/`limit`/`total`) to know if more pages remain. Treat a missing `nextCursor` as the end of results. **3. Searching:** Narrow with a filter rather than paging through everything. Any filter taking ids or codes; `category_id`, `program_id`, `advertiser_id`, `locale_id`, `supply_locale_id`, `currency_code`, `allowed_media_type_id`, `type`; accepts several of them comma-separated and matches programs with at least one. Different filters combine with AND, so a program must satisfy every filter given. - `search_term`: one phrase, not a list; matches a program name partially, or a program id exactly when the term is only digits - `category_id`: ids come from §5; no categories tool exists - `locale_id`/`supply_locale_id`: numeric ids, not country codes; common ones in §5 - `similar_to_id`: `id`(s) of known programs, instead of a category or search term; the inputs are excluded from the answer and the most-similar-first ordering replaces `order_by` Pass a comma-separated subset of the §6 field names as `fields` to return only those; cuts tokens and latency. An unknown name is dropped silently rather than erroring, so match §6 exactly: `id` is the field name, `program_id` the filter name. **4. Scope of this server:** Program data here is the public catalogue. Commissions, subscriptions, transactions, and anything tied to an account are not available on this server; those live on the authenticated publisher and advertiser servers. **5. Category and locale IDs:** Every id `category_id` accepts: ```json {"1":"Automotive","3":"Travel & Leisure","6":"Food & Drinks","7":"Living, House & Garden","8":"Sports, Beauty & Health","10":"Telecom","17":"Business-to-Business","18":"Consumer Electronics","19":"Lotteries & Gambling","23":"Books, Literature & Media","24":"Finance","25":"Work & Education","28":"Others","31":"Adult","32":"Non Profit & Charity","34":"Parenting","36":"Fashion","38":"Dating","42":"Energy","43":"Daily Deals & Auctions","45":"Research panels & Surveys","46":"Games & Esports","47":"Crypto","48":"Sustainable"} ``` The common ids for `locale_id` and `supply_locale_id`. Others exist; read one from a program's `locales`/`supply_locales` field: ```json {"1":"nl-NL","2":"nl-BE","3":"fr-BE","4":"de-DE","5":"fr-FR","9":"en-SE","11":"en-DK","13":"en-FI","17":"en-ES","27":"en-GB","30":"en-NO"} ``` **6. Program fields:** Each item `getAllPublicPrograms` returns: - `id`: program id; filter on it with `program_id` - `advertiser_id`: the advertiser running this program - `name`: program name - `currency_code`: the currency of the `commission` fixed and cpc amounts - `type`: `affiliatemarketing` or `leadgeneration` - `start_date`: program start, `Y-m-d` - `categories`: `[{id, name}]`; the id matches §5 - `locales`: `[{id, code}]`, e.g. `{"id": "1", "code": "nl-NL"}`; filter on the id with `locale_id` - `supply_locales`: same shape as `locales`; filter on the id with `supply_locale_id` - `productfeed`: whether a product feed is available, for building a catalogue or comparison rather than manual links - `deep_linking`: whether a link may point at a specific page, not only the homepage - `allowed_media_types`: `[{id, name}]`; publisher channel types this program accepts, e.g. `blog`, `cashback` - `commission`: `{min_fixed, max_fixed, min_ratio, max_ratio, min_cpc, max_cpc}`, the lowest/highest payout per type; fixed and cpc in `currency_code`, ratio a percentage of the net sales amount eligible for commission - `links`: `{public_campaign_showcase, publisher_campaign_signup, publisher_portal_campaign}`; the program's public page, the link a publisher signs up through, and the program inside the publisher portal. `public_campaign_showcase` is absent when the program carries no category
Known tools 2
CONNECT WITH APPROVAL
Client installation
Review this server and its permissions before adding it. Secret placeholders must be set locally.
Codex
~/.codex/config.toml
[mcp_servers.daisycon-campaigns]
url = "https://mcp.daisycon.com/campaigns/mcp"
enabled = true
Claude Code
.mcp.json
{
"mcpServers": {
"daisycon-campaigns": {
"type": "http",
"url": "https://mcp.daisycon.com/campaigns/mcp"
}
}
}
Claude Desktop
Settings → Connectors → Add custom connector
Name: daisycon-campaigns
Remote MCP URL: https://mcp.daisycon.com/campaigns/mcp
Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.
Cursor
.cursor/mcp.json
{
"mcpServers": {
"daisycon-campaigns": {
"url": "https://mcp.daisycon.com/campaigns/mcp"
}
}
}
Visual Studio Code
.vscode/mcp.json
Add to Visual Studio Code{
"servers": {
"daisycon-campaigns": {
"type": "http",
"url": "https://mcp.daisycon.com/campaigns/mcp"
}
}
}
Generic MCP
Client-specific MCP configuration
{
"name": "daisycon-campaigns",
"transport": "streamable-http",
"url": "https://mcp.daisycon.com/campaigns/mcp"
}
MCP Inspector
Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.
TRUST AND VERIFICATION EVIDENCE
Trust Data Available
BuiltWith Trust API v2 evidence for daisycon.com was fetched 2026-10-15T08:53:58.240Z.
daisycon.com is assessed as Trusted: Domain has an established technology history spanning over a year.
Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.