Skip to content
Verified official

ContrastAPI MCP

v2.0.1 changelog · 2

com.contrastcyber/api

Monitor CVEs, packages, domains and IPs. CVE/EPSS/KEV, SBOM, DNS/TLS, IP lookups. No key, x402.

transport:streamable-http tools:55

Target client

run in your project directory

claude mcp add --transport http api https://api.contrastcyber.com/mcp/

setup guides: Claude Code Claude Desktop Cursor VS Code Zed Windsurf Cline Gemini CLI Grok ChatGPT Claude.ai LangChain

Adds it for this project only. Append --scope user to make it available everywhere. Claude Code docs

domain_report

domain report

audit_domain

audit domain

contrast_scan

contrast scan

tech_stack_cve_audit

tech stack cve audit

threat_report

threat report

dns_lookup

dns lookup

whois_lookup

whois lookup

ssl_check

ssl check

subdomain_enum

subdomain enum

tech_fingerprint

tech fingerprint

threat_intel

threat intel

wayback_lookup

wayback lookup

scan_headers

scan headers

email_mx

email mx

email_security_posture

email security posture

email_disposable

email disposable

email_verify

email verify

robots_txt

robots txt

redirect_chain

redirect chain

brand_assets

brand assets

seo_audit

seo audit

geo_audit

geo audit

phone_lookup

phone lookup

ip_lookup

ip lookup

asn_lookup

asn lookup

cve_lookup

cve lookup

calculate_risk_score

calculate risk score

get_cvss_details Read-only

get cvss details

cve_search

cve search

cve_leading

cve leading

exploit_lookup

exploit lookup

bulk_cve_lookup

bulk cve lookup

kev_detail

kev detail

cwe_lookup

cwe lookup

atlas_technique_lookup

atlas technique lookup

bulk_atlas_technique_lookup

bulk atlas technique lookup

atlas_technique_search

atlas technique search

atlas_case_study_lookup

atlas case study lookup

atlas_case_study_search

atlas case study search

d3fend_defense_lookup

d3fend defense lookup

d3fend_defense_search

d3fend defense search

d3fend_defense_for_attack

d3fend defense for attack

d3fend_attack_coverage

d3fend attack coverage

sigma_rule_lookup

sigma rule lookup

bulk_sigma_rule_lookup

bulk sigma rule lookup

ioc_lookup

ioc lookup

hash_lookup

hash lookup

password_check

password check

phishing_check

phishing check

bulk_ioc_lookup

bulk ioc lookup

check_secrets Read-only

check secrets

check_injection Read-only

check injection

check_dependencies Read-only

check dependencies

username_lookup

username lookup

check_headers Read-only

check headers

All 55 tools, one page each

3 prompts you invoke yourself

3 resources you attach as context

Mutating and Read-only are read off each tool's name, not its schema — a hint, not a guarantee. Check the server's own documentation before granting access.