Does Contrastapi — Security Intelligence require an API key?
No, the server does not require an API key. It offers a free tier with 100 requests per hour.
C
Contrastapi — Security Intelligence MCP Server
@UPinar
基本情報
Contrastapi — Security Intelligence MCP Server について
Security intelligence API for AI models. CVE lookup with EPSS/KEV enrichment, domain reconnaissance (DNS, WHOIS, SSL, subdomains, WAF detection), and code security checks (secrets, injection, headers). No API key required.
Contrastapi — Security Intelligence MCP Server の設定
以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。
{
"mcpServers": {
"contrastapi": {
"url": "https://mcp.contrastcyber.com/mcp"
}
}
}Contrastapi — Security Intelligence MCP Server のツール
ツール一覧はまだありません
この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。
上のボタンでサーバーのエンドポイントに接続し、ツール一覧を取得できます。
概要
What is Contrastapi — Security Intelligence?
Contrastapi — Security Intelligence is an MCP server that provides security intelligence tools for AI agents, including vulnerability lookup, domain reconnaissance, secret detection, and more. It is designed for developers and security teams who want to integrate security checks into AI-driven workflows.
How to use Contrastapi — Security Intelligence?
Add the server to your MCP client configuration. No API key is required. The free tier allows up to 100 requests per hour.
Key features of Contrastapi — Security Intelligence
- Search 340,000+ vulnerabilities with EPSS exploit probability and CISA KEV status
- Full domain reconnaissance: DNS, WHOIS, SSL, subdomains, and WAF detection
- Secret detection for hardcoded API keys, tokens, and passwords (14 patterns)
- Injection detection for SQL, command, and path traversal patterns
- HTTP security header validation against best practices
- Dependency checking of packages against the CVE database
Use cases of Contrastapi — Security Intelligence
- Identify known vulnerabilities and exploit probability for CVEs
- Perform comprehensive domain security audits during incident response
- Scan codebases for accidental exposure of secrets before deployment
- Validate web application security headers for compliance
- Check third-party dependencies for known vulnerabilities
よくある質問
How many vulnerabilities does the CVE lookup cover?
Over 340,000 vulnerabilities, with EPSS exploit probability and CISA KEV status included.
What patterns does secret detection support?
Secret detection covers 14 patterns for hardcoded API keys, tokens, and passwords.
Is domain report a single tool or multiple?
The domain report tool provides full reconnaissance including DNS, WHOIS, SSL, subdomains, and WAF detection in one call, while individual lookups for DNS, WHOIS, and SSL are also available separately.
「開発者ツール」の他のコンテンツ
Yocoolab
YocoolabMCP server for AI Agents — exposes Yocoolab feedback threads and design selections as tools
1
Agent Conductor
icohangar-opsAgent conductor — AGENTS.md contract parser, SKILL.md registry, CHP decision engine over MCP
LastPing
LastPingKnow when your AI agents, cron jobs and CI pipelines fail, stall or go quiet. Your agent sets up monitors from a plain description, tells you what is broken and why, reads run history and traces, and writes notes on inci
Meticulous
Meticulous
OrangePro
Aamir SiddiquiOrangePro local-first CLI + MCP server for behavior mapping, grounded test generation, and dynamic proof.
12
コメント