[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_125":126},"routes/modules.$creator.$moduleId",{"_14":15,"_16":17,"_18":19,"_20":21},"routes/modules.$creator.$moduleId.endpoints",{"_11":12,"_13":-5},"error","Module '@upinar/contrastapi' is not configured","tools","module",{"_20":22,"_23":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":26,"_34":-5,"_35":36,"_37":-5,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":52,"_53":54,"_55":48,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":-5,"_63":-5,"_64":65,"_66":67,"_68":69,"_70":71,"_72":73,"_74":-5,"_75":-5,"_76":-5,"_77":48,"_78":-5,"_79":80,"_81":82,"_83":84,"_85":86,"_87":88,"_89":90,"_91":92},"apiUrl","https://odel.app/api","creator","upinar","moduleId","contrastapi","@upinar/contrastapi","displayName","ContrastAPI","tagline","54 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.","iconKey","https://avatars.githubusercontent.com/u/72672033?v=4","category","communication","status","published","metaDescription","metaKeywords","deploymentType","external","workerName","bindingName","mcpConfig","{\"url\":\"https://api.contrastcyber.com/mcp/\",\"transport\":\"streamable-http\",\"authType\":\"none\"}","pricingModel","free","creatorUserId","system:external-import","createdAt",1781363263000,"updatedAt",1781499391000,"sourceRegistry","official-mcp-registry","sourceUrl","https://registry.modelcontextprotocol.io/v0/servers?search=com.contrastcyber%2Fapi","sourceVerified",false,"importedAt","upstreamStars",28,"upstreamUpdatedAt",1781489287000,"detectedTransport","detectedAuthType","probeStatus","lastProbedAt","githubRepoUrl","https://github.com/UPinar/contrastapi","githubRepoFullName","UPinar/contrastapi","releaseId","ext-upinar-contrastapi","version","1.34.1","descriptionMarkdown","# ContrastAPI — 54 Security Tools + 7 MCP Resources for AI Agents\n\n

\n $\"ContrastAPI$ \n

\n\n[![MCP](https://img.shields.io/badge/MCP-54_tools-purple.svg)](https://modelcontextprotocol.io)\n[![smithery badge](https://smithery.ai/badge/contrastcyber/contrastapi)](https://smithery.ai/servers/contrastcyber/contrastapi)\n[![contrastapi MCP server](https://glama.ai/mcp/servers/UPinar/contrastapi/badges/score.svg)](https://glama.ai/mcp/servers/UPinar/contrastapi)\n[![License: MIT](https://img.shields.io/badge/License-MIT-green.svg)](LICENSE)\n\n**Security intelligence MCP server for AI agents.** CVE/KEV/CWE lookup with EPSS, **composite risk scoring (CVSS+EPSS+KEV+PoC fusion — v1.29.1)**, **CVSS v3.x vector parser (v1.29.1)**, domain audit, IP threat reports, IOC enrichment, code security, **MITRE ATLAS (AI/ML attacks) + D3FEND (defenses)**, **web intelligence (robots.txt, redirect-chain, email validation, brand-assets, SEO audit — v1.25.0)**. **54 tools + 7 Resources (ATLAS+D3FEND+CWE catalog browsing) + 3 Prompts (security audit, vulnerability check, conditional triage), free, no API key, 30 credits/hour.**\n\n[中文](https://github.com/UPinar/contrastapi/blob/main/README_CN.md) · **Live:** [api.contrastcyber.com](https://api.contrastcyber.com)\n\n---\n\n## Setup (MCP)\n\n```json\n{\n \"mcpServers\": {\n \"contrastapi\": {\n \"command\": \"npx\",\n \"args\": [\"-y\", \"mcp-remote\", \"https://api.contrastcyber.com/mcp/\"]\n }\n }\n}\n```\n\nRestart your agent. Other clients (Python SDK, Node SDK, cURL, VS Code): **[mcp-setup](https://api.contrastcyber.com/mcp-setup)** · **[quickstart](https://api.contrastcyber.com/quickstart)**\n\n## SDKs\n\n```bash\npip install contrastapi # Python 3.10+ — sync + async, typed responses, shortcut helpers\nnpm install contrastapi # Node 14+ — concrete TypeScript types, 14 namespaces\n```\n\nBoth SDKs cover all 60+ HTTP endpoints / 54 MCP tools (CVE/KEV/CWE, ATLAS, D3FEND, Sigma rules, email security posture, domain, IP, IOC, code-security, web-intel, etc.) with the same wire-exact response shapes and a typed exception hierarchy mirroring the v1.22.2+ error envelope. v1.23.0 adds MCP Resources (ATLAS+D3FEND+CWE catalog browsing — see [docs/resources.md](https://github.com/UPinar/contrastapi/blob/main/docs/resources.md)) and a conditional triage Prompt (see [docs/PROMPTS.md#contrast-triage-v1230](https://github.com/UPinar/contrastapi/blob/main/docs/PROMPTS.md)). v1.25.0 adds 5 web-intelligence tools (`robots_txt`, `redirect_chain`, `email_verify`, `brand_assets`, `seo_audit`) with explicit ethical-floor guardrails (per-target eTLD+1 throttle, robots.txt respected, no SMTP probing).\n\n## Try it\n\n```bash\ncurl 'https://api.contrastcyber.com/v1/cves?product=openssl&kev=true' # cve_search — CVEs by product, KEV-only filter\ncurl https://api.contrastcyber.com/v1/domain/example.com # domain_report — DNS+WHOIS+SSL+subdomains+intel, one call\ncurl https://api.contrastcyber.com/v1/scan/example.com # contrast_scan — active scan, 11 modules + letter grade + findings\ncurl https://api.contrastcyber.com/v1/cve/CVE-2021-44228 # cve_lookup — full record (CVSS+EPSS+KEV+CWE)\ncurl https://api.contrastcyber.com/v1/exploit/CVE-2021-44228 # exploit_lookup — public PoC / exploit availability\ncurl https://api.contrastcyber.com/v1/ip/1.1.1.1 # ip_lookup — reputation, geo, ASN, threat intel\n```\n\nOr ask your agent:\n\n- *\"Search for KEV-listed OpenSSL CVEs, then pull the full record for the highest-EPSS one.\"*\n- *\"Run a full domain report for example.com — DNS, WHOIS, SSL, subdomains, and threat intel in one call.\"*\n- *\"Scan example.com for security misconfigurations and give me a letter grade with the top findings.\"*\n- *\"Does CVE-2021-44228 have a public exploit or PoC available?\"*\n- *\"What's the reputation, country, and ASN for 1.1.1.1 — is it flagged in any threat feed?\"*\n\n## Links\n\n**Endpoints:** [docs/ENDPOINTS.md](https://github.com/UPinar/contrastapi/blob/main/docs/ENDPOINTS.md) · **OpenAPI:** [openapi.json](https://api.contrastcyber.com/openapi.json)\n\n

Also available on

\n\n[Smithery](https://smithery.ai/servers/contrastcyber/contrastapi) · [npm](https://www.npmjs.com/package/contrastapi) · [VS Code Marketplace](https://marketplace.visualstudio.com/items?itemName=ContrastAPI.contrastapi) · [Awesome OSINT MCP](https://github.com/soxoj/awesome-osint-mcp-servers) · [RapidAPI](https://rapidapi.com/UPinar/api/contrastapi)\n\n

\n\n

Multi-agent verdict metadata

\n\nResponses include a `verdict` block — `deterministic`, `falsifiable_fields`, `data_age_seconds`, `sources_queried` / `sources_unavailable`, `completeness` — so a verifier agent can independently re-derive specific fields from the upstream authority (NVD, RDAP, CT logs, URLhaus). Probe `GET /v1/capabilities` for `\"verdict_metadata\": true`.\n\nCVE responses also embed `next_calls: list[PivotHint]` — `{tool, input, reason}` triples that suggest the next MCP tool to call (e.g. `kev_detail` when `kev.in_kev=true`, `cwe_lookup` when `cwe_id` is set). Agents chain workflows without manual prompting.\n\n

\n\nMIT\n","changelogMarkdown","videoKey","requiredSecretsJson","publishedAt","priceCents","trialDays",0,"categoryDisplayName","Communication","upstream",{"_95":96,"_97":98,"_99":100,"_101":102,"_103":104},"requiredSecrets",[],"tags",[],"assets",[],"stats",{"_93":80,"_94":80},"ratingAvg","reviewCount","topics",[105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124],"license","MIT","language","Python","registryName","com.contrastcyber/api","homepage","https://api.contrastcyber.com","ai-agents","ai-security","api","claude","cve","cybersecurity","domain-recon","email-security","email-validation","llm-tools","mcp","mitre-atlas","mitre-d3fend","model-context-protocol","osint","security","sigma-rules","threat-intelligence","vulnerability-management","web-intel","ENV",{"_127":128,"_129":130,"_131":132},"ENVIRONMENT","production","TURNSTILE_SITE_KEY","0x4AAAAAAB8-rEI2gNDf_QhU","SENTRY_DSN","https://45fd1229f78089d5c3ee78be128030e1@o4510583261757440.ingest.de.sentry.io/4510584253448272"]