sigma_rule_lookup — ContrastAPI MCP Tool
sigma_rule_lookup
(sigma rule lookup) is one of 55 tools on the
ContrastAPI
MCP server. Connect the server and your client discovers it on the handshake.
by client
How to call sigma_rule_lookup from your client
- Claude Code ContrastAPI sigma_rule_lookup run in your project directory
- Claude Desktop ContrastAPI sigma_rule_lookup ~/Library/Application Support/Claude/claude_desktop_config.json
- Cursor ContrastAPI sigma_rule_lookup ~/.cursor/mcp.json
- VS Code ContrastAPI sigma_rule_lookup .vscode/mcp.json
- Zed ContrastAPI sigma_rule_lookup ~/.config/zed/settings.json
- Windsurf ContrastAPI sigma_rule_lookup ~/.codeium/windsurf/mcp_config.json
- Cline ContrastAPI sigma_rule_lookup ~/Library/Application Support/Code/User/globalStorage/saoudrizwan.claude-dev/settings/cline_mcp_settings.json
- Gemini CLI ContrastAPI sigma_rule_lookup ~/.gemini/settings.json
- Grok ContrastAPI sigma_rule_lookup .mcp.json (in your project root)
- ChatGPT ContrastAPI sigma_rule_lookup Settings → Connectors → Advanced → Developer mode
- Claude.ai ContrastAPI sigma_rule_lookup Settings → Connectors → Add custom connector
- LangChain ContrastAPI sigma_rule_lookup pip install langchain-mcp-adapters
Fastest route
claude mcp add --transport http api https://api.contrastcyber.com/mcp/Other tools on this server
- domain_report
- audit_domain
- contrast_scan
- tech_stack_cve_audit
- threat_report
- dns_lookup
- whois_lookup
- ssl_check
- subdomain_enum
- tech_fingerprint
- threat_intel
- wayback_lookup
- scan_headers
- email_mx
- email_security_posture
- email_disposable
- email_verify
- robots_txt
- redirect_chain
- brand_assets
- seo_audit
- geo_audit
- phone_lookup
- ip_lookup
- asn_lookup
- cve_lookup
- calculate_risk_score
- get_cvss_details
- cve_search
- cve_leading
- exploit_lookup
- bulk_cve_lookup
- kev_detail
- cwe_lookup
- atlas_technique_lookup
- bulk_atlas_technique_lookup
- atlas_technique_search
- atlas_case_study_lookup
- atlas_case_study_search
- d3fend_defense_lookup
- d3fend_defense_search
- d3fend_defense_for_attack
- d3fend_attack_coverage
- bulk_sigma_rule_lookup
- ioc_lookup
- hash_lookup
- password_check
- phishing_check
- bulk_ioc_lookup
- check_secrets
- check_injection
- check_dependencies
- username_lookup
- check_headers
This list was read from the server itself, by connecting to it and calling tools/list on 24 September 2026. It is what
the server actually exposes, not what its listing claims.
Mutating and Read-only are read off each tool's name, not its schema — a hint, not a guarantee. The registry stores tool names only; connect the server for its live schemas.