Security & Testing

contrastcyber.com

Provides domain and IP security analysis, threat intelligence, and vulnerability scanning tools.

1 endpoint55 known toolsFirst detected May 29, 2026Last detected September 6, 2026

ENDPOINT 1

https://api.contrastcyber.com/mcp

No auth detected

MCP server metadata

Name: contrastapi
Version: 1.36.2

Capabilities

experimentalpromptsresourcestools

Known tools 55

domain_report

Query DNS, WHOIS, SSL, subdomains, and threat intel for a domain in one call.

Inferred read-only

audit_domain

Perform comprehensive domain audit: combines domain_report + live HTTP security headers + technology fingerprinting.

Inferred read-only

contrast_scan

Active website security scan: runs the ContrastScan C engine (11 modules — HTTP security headers, SSL/TLS, DNS, redirect chain, information disclosure, cookie flags, DNSSEC, HTTP methods, CORS, HTML hygiene, deep CSP analysis) against the live site and enriches the raw result with severity-ranked vulnerability findings and a letter grade.

Inferred read-only

tech_stack_cve_audit

Composite tech-stack + CVE audit (MCP-only, no REST endpoint).

Inferred read-only

threat_report

Query comprehensive threat profile for an IP: Shodan host data, AbuseIPDB reputation, ASN/geolocation, and open ports.

Inferred read-only

dns_lookup

Query all DNS record types (A, AAAA, MX, NS, TXT, CNAME, SOA) for a domain.

Inferred read-only

whois_lookup

Retrieve WHOIS registration data: registrar, creation/expiry dates, nameservers, status.

Inferred read-only

ssl_check

Analyze SSL/TLS certificate: grade (A/B/C/D/F), protocol version, cipher suite, chain, expiry, Subject Alternative Names, and structured validation findings.

Inferred read-only

subdomain_enum

Discover subdomains using passive methods: Certificate Transparency logs + DNS brute-force (no active probing).

Inferred read-only

tech_fingerprint

Detect website technology stack: CMS, frameworks, CDN, analytics tools, web servers, languages (via HTTP headers + HTML analysis).

Inferred read-only

threat_intel

Check domain against abuse.

Inferred read-only

wayback_lookup

Retrieve Wayback Machine snapshots for a domain: first capture, latest, total count, snapshot list.

Inferred read-only

scan_headers

Perform live HTTP GET and analyze security headers: CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Permissions-Policy, Referrer-Policy.

Inferred read-only

email_mx

Analyze email security: MX records, SPF policy, DMARC policy, DKIM probe across common+date-based selectors, mail provider, grade.

Potential side effects

email_security_posture

Analyze domain email authentication posture: SPF, DMARC, DKIM with numeric score and findings.

Potential side effects

email_disposable

Check if email address uses a known disposable/temporary provider (Guerrilla Mail, Temp Mail, Mailinator, etc.

Potential side effects

email_verify

One-call email validation combining syntax + MX records + disposable check + role-address detection (admin@/info@/.

Potential side effects

robots_txt

Fetch + parse the target domain's robots.

Inferred read-only

redirect_chain

Walk an HTTP redirect chain hop-by-hop, returning per-hop {url, status_code, location, latency_ms}.

Inferred read-only

brand_assets

Scrape a domain's homepage `<head>` for public brand assets — favicon, og:image, theme-color, og:site_name, JSON-LD `Organization.

Inferred read-only

seo_audit

One-shot SEO audit of a domain's homepage with a 0-100 composite score + a `missing_signals` list of concrete fixes.

Inferred read-only

geo_audit

Deterministic GEO / AI-visibility readiness audit of a domain's homepage with a 0-100 score + a `missing_signals` fix list.

Inferred read-only

phone_lookup

Validate and analyze phone number: country, region, carrier, line type (mobile/landline/VoIP), timezone, formatted versions.

Inferred read-only

ip_lookup

Query comprehensive IP intelligence: reverse DNS, ASN + holder name + country inline (RIPE Stat, Phase 1), open ports, hostnames, vulnerabilities (Shodan InternetDB enriched with severity + cvss_v3 from local cve.

Inferred read-only

asn_lookup

Look up Autonomous System Number (ASN) for a domain or IP: AS number, organization, IPv4/IPv6 prefixes.

Inferred read-only

cve_lookup

Retrieve detailed CVE data by ID: description, CVSS v3.

Inferred read-only

calculate_risk_score

Composite CVE risk score (0-100) — fuses CVSS, EPSS, KEV, and PoC into a single agent-ready triage signal.

Inferred read-only

get_cvss_details

Parse a CVSS v3.

Inferred read-only

cve_search

Search CVE database with filters: product/vendor, severity, published date range, EPSS score, CWE, CVSS range, CISA KEV status.

Inferred read-only

cve_leading

List CVEs indexed from MITRE/GHSA BEFORE NVD publication (early-warning, freshest data).

Inferred read-only

exploit_lookup

Search public exploits/PoC for a specific CVE across three sources: (1) GitHub Advisory Database (sources.

Inferred read-only

bulk_cve_lookup

Batch query multiple CVEs (up to 50 per call, same for Free and Pro): retrieve full CVE details for all in 1 request instead of N.

Inferred read-only

kev_detail

Look up CISA KEV (Known Exploited Vulnerabilities) full record for a CVE.

Inferred read-only

cwe_lookup

Look up MITRE CWE (Common Weakness Enumeration) catalog record from research view 1000.

Inferred read-only

atlas_technique_lookup

Look up a MITRE ATLAS technique — the AI/ML adversarial attack catalog.

Inferred read-only

bulk_atlas_technique_lookup

Bulk ATLAS technique lookup — retrieve full records for up to 50 techniques in a single request instead of N separate atlas_technique_lookup calls.

Inferred read-only

atlas_technique_search

Search the MITRE ATLAS catalog of AI/ML attack techniques by keyword, tactic, or maturity.

Inferred read-only

atlas_case_study_lookup

Look up a MITRE ATLAS case study — a documented real-world AI/ML attack incident.

Inferred read-only

atlas_case_study_search

Search ATLAS case studies (real-world AI/ML attack incidents) by keyword or referenced technique.

Inferred read-only

d3fend_defense_lookup

Look up a MITRE D3FEND defense technique.

Inferred read-only

d3fend_defense_search

Search the MITRE D3FEND catalog of defensive techniques by keyword, tactic, or targeted artifact.

Inferred read-only

d3fend_defense_for_attack

Reverse lookup: given an ATT&CK T-code, return D3FEND defenses that mitigate it.

Inferred read-only

d3fend_attack_coverage

Batch coverage breakdown: given a list of ATT&CK T-codes, return distinct defense counts per D3FEND tactic + identify which techniques have NO D3FEND mapping (undefended_techniques).

Inferred read-only

sigma_rule_lookup

Look up a single Sigma detection rule by UUID from the SigmaHQ corpus (~3,200 rules, refreshed daily at 02:00 UTC).

Inferred read-only

bulk_sigma_rule_lookup

Bulk Sigma rule lookup — retrieve full records for up to 50 rule UUIDs in a single request instead of N separate sigma_rule_lookup calls.

Inferred read-only

ioc_lookup

Enrich Indicator of Compromise (IP/domain/URL/hash) by auto-detecting type and querying abuse.

Inferred read-only

hash_lookup

Query MalwareBazaar for file hash (MD5/SHA1/SHA256): malware family, file type, size, tags, first/last seen, download count.

Inferred read-only

password_check

Check if SHA-1 hash appears in Have I Been Pwned (HIBP) breach dataset using k-anonymity (5-char prefix only, full hash never leaves tool).

Inferred read-only

phishing_check

Query URLhaus for a specific URL and its host.

Inferred read-only

bulk_ioc_lookup

Batch query multiple IOCs (IP/domain/URL/hash, up to 50 per call, same for Free and Pro) in 1 request: auto-detects type + queries abuse.

Inferred read-only

check_secrets

Scan source code (or snippet) for hardcoded secrets — cloud provider keys, API tokens, connection strings, private keys, passwords.

Inferred read-only

check_injection

Scan source code for injection vulnerabilities: SQL injection, command injection, path traversal via unsafe string concatenation/unsanitized input.

Potential side effects

check_dependencies

Audit project dependencies (npm/PyPI/Maven/RubyGems/etc.

Inferred read-only

username_lookup

Search for username across 15+ social/dev platforms (GitHub, Reddit, X/Twitter, LinkedIn, Instagram, TikTok, Discord, YouTube, Keybase, HackerOne, etc.

Inferred read-only

check_headers

Validate HTTP security headers you provide (JSON): CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Permissions-Policy, Referrer-Policy against best practices.

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.contrastapi]
url = "https://api.contrastcyber.com/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "contrastapi": {
      "type": "http",
      "url": "https://api.contrastcyber.com/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: contrastapi
Remote MCP URL: https://api.contrastcyber.com/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "contrastapi": {
      "url": "https://api.contrastcyber.com/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "contrastapi": {
      "type": "http",
      "url": "https://api.contrastcyber.com/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "contrastapi",
  "transport": "streamable-http",
  "url": "https://api.contrastcyber.com/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Trust Data Available

BuiltWith Trust API v2 evidence for contrastcyber.com was fetched 2026-08-25T12:04:50.033Z.

Trust status Neutral

contrastcyber.com is assessed as Neutral: No suspicious signals found, but no strong positive signal either

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.