contrastapi

Overview

ContrastAPI is a comprehensive security intelligence MCP server that provides 53 tools for cybersecurity professionals and AI agents. It includes capabilities for CVE/KEV/CWE lookup with EPSS scoring, domain audit, IP threat reports, IOC enrichment, code security analysis, and web intelligence tools. The server integrates with multiple security intelligence sources including MITRE ATLAS, D3FEND, and Sigma detection rules. It offers both free tier usage (30 credits/hour) and paid options, with no API key required for basic functionality.

Try asking AI

After installing, here are 5 things you can ask your AI assistant:

• cve_search

  Search for CVEs by product with optional KEV filter

  Try:Search for KEV-listed OpenSSL CVEsTry:Find all CVEs affecting Apache Struts
• cve_lookup

  Get full CVE record including CVSS, EPSS, KEV status, and CWE

  Try:Pull the full record for CVE-2021-44228Try:Get details for CVE-2023-23397 with EPSS score
• exploit_lookup

  Check for public exploits or proof-of-concept for a CVE

  Try:Does CVE-2021-44228 have a public exploit available?Try:Find PoC for the latest Microsoft Office vulnerability
• domain_report

  Comprehensive domain analysis including DNS, WHOIS, SSL, subdomains, and threat intel

  Try:Run a full domain report for example.comTry:Analyze microsoft.com for DNS, WHOIS, SSL, and subdomains
• ip_lookup

  Get reputation, country, ASN, and threat intel for an IP address

  Try:What's the reputation of 1.1.1.1?Try:Check threat intelligence for 185.220.101.42
• robots_txt

  Fetch and analyze robots.txt file from a website

  Try:Get the robots.txt file for example.comTry:Analyze crawl rules for google.com
• redirect_chain

  Trace the complete redirect chain of a URL

  Try:Show the redirect chain for short.link/abc123Try:Trace where bit.ly/cybersec leads
• email_verify

  Verify email address validity without sending emails

  Try:Verify if security@microsoft.com is validTry:Check if test@example.com exists
• brand_assets

  Discover brand assets and security-relevant web resources

  Try:Find brand assets for apple.comTry:Identify security-relevant resources from microsoft.com
• seo_audit

  Conduct SEO analysis with ethical guardrails

  Try:Perform SEO audit for example.comTry:Check SEO metrics for my-website.org
• atlas_lookup

  Lookup MITRE ATLAS AI/ML attack techniques

  Try:Find ATLAS techniques for data poisoning attacksTry:Get information on model evasion attacks
• d3fend_lookup

  Lookup MITRE D3FEND defensive techniques

  Try:Find D3FEND techniques for protecting against injection attacksTry:Get defensive measures for AI model poisoning

Comparable tools

Installation

{
  "mcpServers": {
    "contrastapi": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://api.contrastcyber.com/mcp/"]
    }
  }
}

pip install contrastapi  # Python 3.10+

npm install contrastapi  # Node 14+

FAQ

Is there a free tier available?

Yes, ContrastAPI offers a free tier with 30 credits per hour. No API key is required for basic functionality.

What types of security tools are included?

The server provides 53 security tools including CVE/KEV/CWE lookup, MITRE ATLAS+D3FEND integration, domain audit, IP threat reports, IOC enrichment, code security analysis, and web intelligence tools.

Compare contrastapi with