Does Contrastapi — Security Intelligence require an API key?
No, the server does not require an API key. It offers a free tier with 100 requests per hour.
C
Contrastapi — Security Intelligence MCP Server
@UPinar
关于 Contrastapi — Security Intelligence MCP Server
Security intelligence API for AI models. CVE lookup with EPSS/KEV enrichment, domain reconnaissance (DNS, WHOIS, SSL, subdomains, WAF detection), and code security checks (secrets, injection, headers). No API key required.
Contrastapi — Security Intelligence MCP Server 配置
使用下面的配置,将此服务器添加到你的 MCP 客户端。
{
"mcpServers": {
"contrastapi": {
"url": "https://mcp.contrastcyber.com/mcp"
}
}
}Contrastapi — Security Intelligence MCP Server 工具
工具列表暂未提供
当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。
点击上方按钮,直接连接服务器端点实时获取工具列表。
概览
What is Contrastapi — Security Intelligence?
Contrastapi — Security Intelligence is an MCP server that provides security intelligence tools for AI agents, including vulnerability lookup, domain reconnaissance, secret detection, and more. It is designed for developers and security teams who want to integrate security checks into AI-driven workflows.
How to use Contrastapi — Security Intelligence?
Add the server to your MCP client configuration. No API key is required. The free tier allows up to 100 requests per hour.
Key features of Contrastapi — Security Intelligence
- Search 340,000+ vulnerabilities with EPSS exploit probability and CISA KEV status
- Full domain reconnaissance: DNS, WHOIS, SSL, subdomains, and WAF detection
- Secret detection for hardcoded API keys, tokens, and passwords (14 patterns)
- Injection detection for SQL, command, and path traversal patterns
- HTTP security header validation against best practices
- Dependency checking of packages against the CVE database
Use cases of Contrastapi — Security Intelligence
- Identify known vulnerabilities and exploit probability for CVEs
- Perform comprehensive domain security audits during incident response
- Scan codebases for accidental exposure of secrets before deployment
- Validate web application security headers for compliance
- Check third-party dependencies for known vulnerabilities
常见问题
How many vulnerabilities does the CVE lookup cover?
Over 340,000 vulnerabilities, with EPSS exploit probability and CISA KEV status included.
What patterns does secret detection support?
Secret detection covers 14 patterns for hardcoded API keys, tokens, and passwords.
Is domain report a single tool or multiple?
The domain report tool provides full reconnaissance including DNS, WHOIS, SSL, subdomains, and WAF detection in one call, while individual lookups for DNS, WHOIS, and SSL are also available separately.
开发工具 分类下的更多 MCP 服务器
GripForge
gripforgeaiThe tools your AI needs to make your games. Turn prompts into production-ready game assets — animated characters with their weapons attached, seamless textures, terrain, VFX, HUDs — and playable game kits Unity, Godot, U
1
DocBin
DocBinGive an agent a place to put large output. Instead of returning 40k characters of a build log into the conversation, it posts the file to DocBin and hands back one short URL. Docs render with syntax highlighting and mark
Modelglass
ModelglassModelglass turns "which model should I use?" into a lookup instead of a guess. Seven tools give your agent live pricing across image, language, video, and audio models. Sourced and versioned, not scraped once and forgott
1
ArtiBot Cloud MCP - Zhijiangyun 智匠云
bofobArtiBot Cloud MCP (Zhijiangyun 智匠云) — cloud MCP server for robot manipulation data & GPU workloads. 15 tools: robot fleet management, data collection & video recording, post-processing pipelines, and benchmark evaluation
1
Mythex
MythexRemote MCP server for Mythex, an AI app builder. Claude, Cursor or Codex get a cloud sandbox to build full-stack apps: files and bash, live preview, Postgres database, file storage, secrets, checkpoints, browser tests an
评论