ContrastAPI MCP Tools
ContrastAPI exposes 55 tools. Each one has its own page with the configuration for every client that can run this server.
-
domain_reportdomain report
-
audit_domainaudit domain
-
contrast_scancontrast scan
-
tech_stack_cve_audittech stack cve audit
-
threat_reportthreat report
-
dns_lookupdns lookup
-
whois_lookupwhois lookup
-
ssl_checkssl check
-
subdomain_enumsubdomain enum
-
tech_fingerprinttech fingerprint
-
threat_intelthreat intel
-
wayback_lookupwayback lookup
-
scan_headersscan headers
-
email_mxemail mx
-
email_security_postureemail security posture
-
email_disposableemail disposable
-
email_verifyemail verify
-
robots_txtrobots txt
-
redirect_chainredirect chain
-
brand_assetsbrand assets
-
seo_auditseo audit
-
geo_auditgeo audit
-
phone_lookupphone lookup
-
ip_lookupip lookup
-
asn_lookupasn lookup
-
cve_lookupcve lookup
-
calculate_risk_scorecalculate risk score
-
get_cvss_detailsRead-onlyget cvss details
-
cve_searchcve search
-
cve_leadingcve leading
-
exploit_lookupexploit lookup
-
bulk_cve_lookupbulk cve lookup
-
kev_detailkev detail
-
cwe_lookupcwe lookup
-
atlas_technique_lookupatlas technique lookup
-
bulk_atlas_technique_lookupbulk atlas technique lookup
-
atlas_technique_searchatlas technique search
-
atlas_case_study_lookupatlas case study lookup
-
atlas_case_study_searchatlas case study search
-
d3fend_defense_lookupd3fend defense lookup
-
d3fend_defense_searchd3fend defense search
-
d3fend_defense_for_attackd3fend defense for attack
-
d3fend_attack_coveraged3fend attack coverage
-
sigma_rule_lookupsigma rule lookup
-
bulk_sigma_rule_lookupbulk sigma rule lookup
-
ioc_lookupioc lookup
-
hash_lookuphash lookup
-
password_checkpassword check
-
phishing_checkphishing check
-
bulk_ioc_lookupbulk ioc lookup
-
check_secretsRead-onlycheck secrets
-
check_injectionRead-onlycheck injection
-
check_dependenciesRead-onlycheck dependencies
-
username_lookupusername lookup
-
check_headersRead-onlycheck headers
This list was read from the server itself, by connecting to it and calling tools/list on 24 September 2026. It is what
the server actually exposes, not what its listing claims.
Mutating and Read-only are read off each tool's name, not its schema — a hint, not a guarantee. The registry stores tool names only; connect the server for its live schemas.