In-depth architectural comparison of the Cve Search MCP and Contrastapi MCP servers. Compare execution transports, security boundaries, tool capabilities, quality scores, and ready-to-paste client installation snippets for Claude, Cursor, Windsurf, and VS Code.
At a Glance & Executive Verdict
Cve Search MCP
Security · Local stdio
Quality: 43/100 (Fair) | Auth: No auth required
Contrastapi
Security · Remote HTTP/SSE
Quality: 55/100 (Good) | Auth: No auth required
Verdict Summary: Choose Cve Search MCP if you need specialized Security tools running via a local process. Choose Contrastapi if your workspace requires Security integration with remote web transport. Both servers can be configured concurrently in your client's mcpServers manifest.
Which MCP Server Should You Choose?
Choose Cve Search MCP when:
You need dedicated capabilities in the Security domain.
You prefer local stdio subprocess transport architecture.
Your security boundary fits: No auth required (Free / Open Source).
Primary tools included: Enumerate CVE-Search vendors, Browse products by vendor, Query vulnerabilities by vendor and product.
A Model Context Protocol (MCP) server for querying the CVE-Search API. This server provides comprehensive access to CVE-Search, browse vendor and product、get CVE per CVE-ID、get the last updated CVEs.
Security intelligence API with 31 MCP tools for CVE/EPSS/KEV lookup, domain recon (DNS/WHOIS/SSL/subdomains/CT logs), IOC/threat intel, OSINT (email/phone/username), and code security scanning (secrets, injection). Free 100 req/hr.
Category & Scope
Tools & Capabilities Breakdown
Cve Search MCP Tools (6)
Enumerate CVE-Search vendors
Browse products by vendor
Query vulnerabilities by vendor and product
Retrieve CVE records by ID
Fetch the latest 30 CVEs with CAPEC, CWE, and CPE expansions
Inspect database usage and update times
Contrastapi Tools (6)
55 MCP tools for security intelligence
Ready-to-Paste Client Configurations
Paste either (or both) of these JSON server blocks into your client config file (e.g. claude_desktop_config.json or ~/.cursor/mcp.json).
Cve Search MCP is categorized under Security and uses a local stdio subprocess. In contrast, Contrastapi belongs to Security using remote streaming HTTP/SSE transport. Select Cve Search MCP when you need capabilities focused on security and Contrastapi when you require tools for security.