Contrastcyber MCP server

What it does

ContrastAPI exposes 55 security tools for vulnerability lookup, threat intelligence, and attack-surface investigation. It provides CVE/KEV/CWE data from NVD, CISA, and MITRE, plus domain/IP investigation, IOC enrichment, Sigma rules, email security checks, and web intelligence—designed for AI agents to ground security decisions in authoritative sources.

• Look up CVE details, EPSS exploit probability, and CISA KEV status to assess vulnerability risk with composite scoring.
• Investigate domains and IPs, verify email SPF/DMARC posture, and enrich indicators of compromise.
• Query MITRE ATLAS and D3FEND frameworks, retrieve CWE details, and access Sigma detection rules for threat analysis.

Tools this server exposes

Tool	Does
cve_lookup	Retrieve CVE details including EPSS score and CISA KEV status.
kev_detail	Look up CISA Known Exploited Vulnerabilities catalog entry.
cwe_lookup	Query Common Weakness Enumeration details and relationships.
domain_lookup	Investigate domain registration, DNS records, and security posture.
ip_lookup	Perform IP geolocation, ASN, and reputation checks.
ioc_enrich	Enrich indicators of compromise with threat intelligence.
email_spf_check	Verify SPF record configuration for a domain.
email_dmarc_check	Check DMARC policy and alignment for a domain.
sigma_rule_search	Search Sigma detection rules by keyword or identifier.
atlas_lookup	Query MITRE ATLAS AI threat framework.
d3fend_lookup	Look up D3FEND defensive techniques.
robots_txt	Fetch and parse robots.txt from a domain.
redirect_chain	Trace HTTP redirect chain for a URL.
email_verify	Verify email address validity with throttled probing.
brand_assets	Retrieve brand and favicon data for a domain.
seo_audit	Perform SEO analysis on a web page.
geo_audit	Analyze geographic or geolocation data for a target.

Before you enable it

An MCP server runs with whatever access you give it. Start with a development account rather than production, and check which tools the server exposes before you let an agent call them unattended.