An official MCP server from ContrastCyber providing 55 security intelligence tools for CVE lookup, domain recon, IP threat reports, IOC enrichment, MITRE ATLAS analysis, and code security audits. It offers structured JSON responses optimized for LLMs, supporting features like SPF/DMARC checks, SSL grading, and bulk threat intelligence without requiring an API key for the free tier.
- Operator: ContrastCyber
- Endpoint: https://api.contrastcyber.com/mcp/
- Transport: streamable-http
- Sign-in: No sign-in
- Category: Developer tools
- Use cases: Lookup CVE details and risk scores; Perform domain and IP threat intelligence; Audit email security posture (SPF/DMARC); Check for hardcoded secrets in code
- Tools: domain_report, audit_domain, contrast_scan, tech_stack_cve_audit, threat_report, dns_lookup, whois_lookup, ssl_check, subdomain_enum, tech_fingerprint, threat_intel, wayback_lookup, scan_headers, email_mx, email_security_posture, email_disposable, email_verify, robots_txt, redirect_chain, brand_assets, seo_audit, geo_audit, phone_lookup, ip_lookup, asn_lookup, cve_lookup, calculate_risk_score, get_cvss_details, cve_search, cve_leading, exploit_lookup, bulk_cve_lookup, kev_detail, cwe_lookup, atlas_technique_lookup, bulk_atlas_technique_lookup, atlas_technique_search, atlas_case_study_lookup, atlas_case_study_search, d3fend_defense_lookup, d3fend_defense_search, d3fend_defense_for_attack, d3fend_attack_coverage, sigma_rule_lookup, bulk_sigma_rule_lookup, ioc_lookup, hash_lookup, password_check, phishing_check, bulk_ioc_lookup, check_secrets, check_injection, check_dependencies, username_lookup, check_headers
- Documentation: https://api.contrastcyber.com/
- Directory listing: https://koskamo.com/explore/contrastapi-mcp
- Also known as: ContrastAPI MCP MCP; contrastapi-mcp