What is the key difference between Scamverify MCP and Contrastapi?

Scamverify MCP belongs to the Security category with local stdio execution, while Contrastapi belongs to the Security category with local stdio execution.

How do I install Scamverify MCP or Contrastapi in Claude Desktop or Cursor?

Copy the mcpServers JSON configuration snippet provided on this page into your claude_desktop_config.json or ~/.cursor/mcp.json file and restart your AI client.

Are Scamverify MCP and Contrastapi free or paid?

Scamverify MCP operates under a Freemium model (API Key required). Contrastapi operates under a Free / Open Source model (No auth required).

Which MCP server has more tools and community activity?

Scamverify MCP lists 10 tools with 3 views and 1 GitHub stars. Contrastapi lists 6 tools with 2 views and 33 GitHub stars.

Can I use both Scamverify MCP and Contrastapi together in the same MCP host?

Yes! MCP hosts like Claude Desktop, Cursor, Windsurf, Cline, and VS Code support configuring multiple servers under the mcpServers object simultaneously.

Side-by-Side Model Context Protocol Comparison

Scamverify MCP vs Contrastapi

In-depth architectural comparison of the Scamverify MCP and Contrastapi MCP servers. Compare execution transports, security boundaries, tool capabilities, quality scores, and ready-to-paste client installation snippets for Claude, Cursor, Windsurf, and VS Code.

At a Glance & Executive Verdict

Scamverify MCP

Security · Local stdio

Quality: 55/100 (Good) | Auth: API Key required

Contrastapi

Security · Local stdio

Quality: 55/100 (Good) | Auth: No auth required

Verdict Summary: Choose Scamverify MCP if you need specialized Security tools running via a local process. Choose Contrastapi if your workspace requires Security integration with local subprocess execution. Both servers can be configured concurrently in your client's mcpServers manifest.

Which MCP Server Should You Choose?

Choose Scamverify MCP when:

You need dedicated capabilities in the Security domain.
You prefer local stdio subprocess transport architecture.
Your security boundary fits: API Key required (Freemium).
You have access to required keys: SCAMVERIFY_API_KEY.
Primary tools included: check_phone, check_url, check_text.

Explore Scamverify MCP Details

Choose Contrastapi when:

You need dedicated capabilities in the Security domain.
You prefer local stdio subprocess transport architecture.
Your security boundary fits: No auth required (Free / Open Source).
Primary tools included: 55 MCP security tools and 7 resources covering vulnerabilities, threat intel, and OSINT, Authoritative data sources including NVD, CISA KEV, FIRST EPSS, MITRE ATLAS & D3FEND, Typed Python and Node SDKs with full API coverage and typed exceptions.

Feature & Specification Comparison

Specification	Scamverify MCP scamverifyai Security	Contrastapi UPinar Security
Summary	AI-powered scam and threat verification MCP server. Check phone numbers, URLs, text messages, emails, documents, and QR codes against 8M+ threat intelligence records (FTC/FCC complaints, carrier analysis, URLhaus, ThreatFox). Returns risk scores, verdicts, and detailed signals. 10 tools, OAuth 2.1 + API key auth, Streamable HTTP transport.	Security intelligence API with 31 MCP tools for CVE/EPSS/KEV lookup, domain recon (DNS/WHOIS/SSL/subdomains/CT logs), IOC/threat intel, OSINT (email/phone/username), and code security scanning (secrets, injection). Free 100 req/hr.
Category & Scope

Tools & Capabilities Breakdown

Scamverify MCP Tools (10)

check_phone

Look up a US phone number for scam reports, carrier info, robocall flags, and community reports. Returns risk score (0-100), verdict, and detailed signals from FTC, FCC, carrier, and community data.

check_url

Check a website URL for safety. Analyzes domain age, SSL certificate, redirect chains, brand impersonation, Google Web Risk, URLhaus, ThreatFox, and community reports.

check_text

Analyze a text/SMS message for scam indicators. Extracts and cross-references embedded phone numbers and URLs. AI identifies scam type, red flags, and risk level.

check_email

Analyze an email for phishing indicators. Checks sender domain, email headers (SPF/DKIM/DMARC), brand impersonation, embedded URLs and phone numbers.

check_document

Analyze a document image for scam indicators. Uses vision AI to extract entities (addresses, officials, citations, phone numbers) and verifies them against government databases.

Ready-to-Paste Client Configurations

Paste either (or both) of these JSON server blocks into your client config file (e.g. claude_desktop_config.json or ~/.cursor/mcp.json).

Scamverify MCP Configuration

mcpServers (Claude Desktop / Cursor)

{
  "mcpServers": {
    "scamverifyai-scamverify-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@scamverifyai/scamverify-mcp"
      ],
      "env": {
        "SCAMVERIFY_API_KEY": "YOUR_SCAMVERIFY_API_KEY_HERE"
      }
    }
  }
}

Contrastapi Configuration

mcpServers (Claude Desktop / Cursor)

{
  "mcpServers": {
    "upinar-contrastapi": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote",
        "https://api.contrastcyber.com/mcp/"
      ]
    }
  }
}

Frequently Asked Questions

Scamverify MCP is categorized under Security and uses a local stdio subprocess. In contrast, Contrastapi belongs to Security using local stdio subprocess. Select Scamverify MCP when you need capabilities focused on security and Contrastapi when you require tools for security.

More alternatives to Scamverify MCP More alternatives to Contrastapi Security category hub