INDIVIDUAL MCP TOOL

redirect_chain

Walk an HTTP redirect chain hop-by-hop, returning per-hop {url, status_code, location, latency_ms}.

contrastcyber.comnone authenticationAvailability not checked

LIVE ENDPOINT

https://api.contrastcyber.com/mcp

No auth detected

Connect to this endpoint to inspect the live schema for redirect_chain and invoke it with your own arguments.

{}

Inferred read-only · medium confidence · heuristic, not a guarantee.

CONNECT WITH APPROVAL

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.contrastapi]
url = "https://api.contrastcyber.com/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "contrastapi": {
      "type": "http",
      "url": "https://api.contrastcyber.com/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: contrastapi
Remote MCP URL: https://api.contrastcyber.com/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "contrastapi": {
      "url": "https://api.contrastcyber.com/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "contrastapi": {
      "type": "http",
      "url": "https://api.contrastcyber.com/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "contrastapi",
  "transport": "streamable-http",
  "url": "https://api.contrastcyber.com/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

domain_report — Query DNS, WHOIS, SSL, subdomains, and threat intel for a domain in one call.
audit_domain — Perform comprehensive domain audit: combines domain_report + live HTTP security headers + technology fingerprinting.
contrast_scan — Active website security scan: runs the ContrastScan C engine (11 modules — HTTP security headers, SSL/TLS, DNS, redirect chain, information disclosure, cookie flags, DNSSEC, HTTP methods, CORS, HTML hygiene, deep CSP analysis) against the live site and enriches the raw result with severity-ranked vulnerability findings and a letter grade.
tech_stack_cve_audit — Composite tech-stack + CVE audit (MCP-only, no REST endpoint).
threat_report — Query comprehensive threat profile for an IP: Shodan host data, AbuseIPDB reputation, ASN/geolocation, and open ports.
dns_lookup — Query all DNS record types (A, AAAA, MX, NS, TXT, CNAME, SOA) for a domain.
whois_lookup — Retrieve WHOIS registration data: registrar, creation/expiry dates, nameservers, status.
ssl_check — Analyze SSL/TLS certificate: grade (A/B/C/D/F), protocol version, cipher suite, chain, expiry, Subject Alternative Names, and structured validation findings.