Contrastapi — Security Intelligence
@UPinar
About Contrastapi — Security Intelligence
Security intelligence API for AI models. CVE lookup with EPSS/KEV enrichment, domain reconnaissance (DNS, WHOIS, SSL, subdomains, WAF detection), and code security checks (secrets, injection, headers). No API key required.
Config
Add this server to your MCP-compatible client using the configuration below.
{
"mcpServers": {
"contrastapi": {
"url": "https://mcp.contrastcyber.com/mcp"
}
}
}Tools
No tools detected
We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.
Overview
What is Contrastapi — Security Intelligence?
Contrastapi — Security Intelligence is an MCP server that provides security intelligence tools for AI agents, including vulnerability lookup, domain reconnaissance, secret detection, and more. It is designed for developers and security teams who want to integrate security checks into AI-driven workflows.
How to use Contrastapi — Security Intelligence?
Add the server to your MCP client configuration. No API key is required. The free tier allows up to 100 requests per hour.
Key features of Contrastapi — Security Intelligence
- Search 340,000+ vulnerabilities with EPSS exploit probability and CISA KEV status
- Full domain reconnaissance: DNS, WHOIS, SSL, subdomains, and WAF detection
- Secret detection for hardcoded API keys, tokens, and passwords (14 patterns)
- Injection detection for SQL, command, and path traversal patterns
- HTTP security header validation against best practices
- Dependency checking of packages against the CVE database
Use cases of Contrastapi — Security Intelligence
- Identify known vulnerabilities and exploit probability for CVEs
- Perform comprehensive domain security audits during incident response
- Scan codebases for accidental exposure of secrets before deployment
- Validate web application security headers for compliance
- Check third-party dependencies for known vulnerabilities
FAQ from Contrastapi — Security Intelligence
Does Contrastapi — Security Intelligence require an API key?
No, the server does not require an API key. It offers a free tier with 100 requests per hour.
How many vulnerabilities does the CVE lookup cover?
Over 340,000 vulnerabilities, with EPSS exploit probability and CISA KEV status included.
What patterns does secret detection support?
Secret detection covers 14 patterns for hardcoded API keys, tokens, and passwords.
Is domain report a single tool or multiple?
The domain report tool provides full reconnaissance including DNS, WHOIS, SSL, subdomains, and WAF detection in one call, while individual lookups for DNS, WHOIS, and SSL are also available separately.
Frequently asked questions
Does Contrastapi — Security Intelligence require an API key?
No, the server does not require an API key. It offers a free tier with 100 requests per hour.
How many vulnerabilities does the CVE lookup cover?
Over 340,000 vulnerabilities, with EPSS exploit probability and CISA KEV status included.
What patterns does secret detection support?
Secret detection covers 14 patterns for hardcoded API keys, tokens, and passwords.
Is domain report a single tool or multiple?
The domain report tool provides full reconnaissance including DNS, WHOIS, SSL, subdomains, and WAF detection in one call, while individual lookups for DNS, WHOIS, and SSL are also available separately.
Basic information
More Developer Tools MCP servers
TalkToFigma
sonnylazuardiTalkToFigma: MCP integration between AI Agent (Cursor, Claude Code, Codex) and Figma, allowing Agentic AI to communicate with Figma for reading designs and modifying them programmatically.
Repo Test Architect
RepoAssayLocal-first, read-only MCP server for evidence-backed repository test architecture audits and test planning.
Reelier
Maxime HouleAgents make claims. Reelier writes receipts — record an agent's tool-call workflow once, replay it deterministically at 0 tokens, and diff runs to catch drift.
Altronis
sypherinMCP server + CLI for Altronis — Singapore AI consulting. Ask the Lyra consultant, generate a grant-matched AI transformation plan, pull curated SG AI events/news. Read-only, wraps altronis.sg.
endoflife.ai
endoflife.aiFree MCP server for software end-of-life intelligence: EOL dates, support status, and the 0-100 EOL Risk Score across 480+ tracked products. Agents can check a single version, pull a product's full lifecycle schedule, or
Comments