securityvulnerabilitiesthreat-intelligenceosintmcp
Security intelligence API offering 55 MCP tools for vulnerability lookup, domain recon, IOC enrichment, OSINT, and code security scanning.
Quick Install
Automated & IDE SetupCopy the AI prompt to install this server into Claude Code, Cursor, or another agent β or use 1-click editor setup below.
Not yet automatically verified
We haven't yet run this listing's install command through our automated sandbox check. This isn't a red flag β we're steadily working through the catalog.
Manual Client & Custom JSON ConfigExpand JSON βΎ
Client Config & Setup
Choose your client or environment
Target File:
π‘ Paste the JSON block into your client's configuration file under mcpServers, then restart the application.
Overview
Use cases
Lookup CVE, KEV, EPSS, and CWE vulnerability details with risk scoring
Perform domain and IP reconnaissance including DNS, WHOIS, SSL, subdomains, and CT logs
Enrich indicators of compromise (IOC) with threat intelligence data
Conduct OSINT investigations on emails, phone numbers, and usernames
Scan code for security issues such as secrets and injection vulnerabilities
Key features
55 MCP security tools and 7 resources covering vulnerabilities, threat intel, and OSINT
Authoritative data sources including NVD, CISA KEV, FIRST EPSS, MITRE ATLAS & D3FEND
Typed Python and Node SDKs with full API coverage and typed exceptions
No authentication required, free 100 requests per hour rate limit
Includes verdict metadata for response verification and automated tool chaining
Live web intelligence tools respecting ethical constraints like robots.txt and throttling
Capabilities & Tool Schemas
Inspect callable tools, capabilities, and parameters exposed to AI agents by Contrastapi.
Extracted Tool Capabilities
55 MCP security tools and 7 resources covering vulnerabilities, threat intel, and OSINT
Authoritative data sources including NVD, CISA KEV, FIRST EPSS, MITRE ATLAS & D3FEND
Typed Python and Node SDKs with full API coverage and typed exceptions
No authentication required, free 100 requests per hour rate limit
Includes verdict metadata for response verification and automated tool chaining
Live web intelligence tools respecting ethical constraints like robots.txt and throttling
Documentation Overview
ContrastAPI β 55 Security Tools + 7 MCP Resources for AI Agents
Security intelligence, built for AI agents. Give your agent grounded answers about vulnerabilities, threats, and attack surface β backed by authoritative sources (NVD, CISA KEV, FIRST EPSS, MITRE ATLAS & D3FEND), never guesswork. CVE/KEV/CWE lookup with EPSS exploit-probability and composite risk scoring, domain & IP investigation, IOC enrichment, code-security checks, and live web intelligence. 55 tools, 7 Resources, and 3 Prompts β free, no API key, no signup.
δΈζ Β· Live: api.contrastcyber.com
Documentation
- API Documentation β REST reference: 60+ endpoints, authentication, rate limits, token costs, and response envelope.
- MCP Documentation β MCP tool-selection guide, 7 Resources, 3 Prompts, and copy-paste agent prompts.
Setup (MCP)
Any MCP client
Restart your agent. Other clients (Python SDK, Node SDK, cURL, VS Code): mcp-setup Β· quickstart
Claude Desktop β one-click extension
Grab the .mcpb file from the latest release and double-click it (or Claude Desktop β Settings β Extensions β Install Extensionβ¦). No signup, no API key β all 55 tools ready immediately.
SDKs
Both SDKs cover every HTTP endpoint and MCP tool β CVE/KEV/CWE, ATLAS, D3FEND, Sigma rules, email security posture, domain, IP, IOC, code security, and web intelligence β with wire-exact response shapes and a typed exception hierarchy that mirrors the API error envelope. They also expose MCP Resources for browsing the ATLAS, D3FEND, and CWE catalogs (see docs/MCP_Documentation.md) and a conditional triage Prompt (see docs/MCP_Documentation.md#contrast-triage). Web-intelligence tools β robots_txt, redirect_chain, email_verify, brand_assets, seo_audit, geo_audit β ship with an explicit ethical floor: per-target throttling, robots.txt respected, no SMTP probing.
Links
OpenAPI: openapi.json
Also available on
Smithery Β· npm Β· VS Code Marketplace Β· Awesome OSINT MCP Β· RapidAPI
Multi-agent verdict metadata
Responses include a verdict block β deterministic, falsifiable_fields, data_age_seconds, sources_queried / sources_unavailable, completeness β so a verifier agent can independently re-derive specific fields from the upstream authority (NVD, RDAP, CT logs, URLhaus). Probe GET /v1/capabilities for "verdict_metadata": true.
CVE responses also embed next_calls: list[PivotHint] β {tool, input, reason} triples that suggest the next MCP tool to call (e.g. kev_detail when kev.in_kev=true, cwe_lookup when cwe_id is set). Agents chain workflows without manual prompting.
MIT
Related MCP Servers
Adoption & maintenance
Factual signals from GitHub, npm, and our automated checks β not a rating.
GitHub stars
33
Stargazers on the source repository.
Last commit
5d ago
Most recent push to the default branch.
Directory activity
2 views
Config copies, upvotes, and views on AllMCPs.
Reviews
No reviews yet β be the first to share how this listing worked for you.
Frequently Asked Questions about Contrastapi
AllMCPs Directory Badge
Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.
Badge Style:
Live Dynamic SVG Preview
Markdown (GitHub README)
[](https://allmcps.com/mcp/upinar-contrastapi)HTML Embed
<a href="https://allmcps.com/mcp/upinar-contrastapi"><img src="https://allmcps.com/api/badge/upinar-contrastapi?style=directory" alt="Contrastapi on AllMCPs" /></a>