ContrastAPI

warnings

api.contrastcyber.com

55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.

https://api.contrastcyber.com/mcp/WebsiteNo authMCP 2025-11-25v1.36.0last checked 24 Aug 2026spoke MCP on 2 of 2 checks (30 days)initialize in 553 ms

How to authenticate

Checked against the endpoint by our probe on 24 Aug 2026. These are the capabilities the server advertises, not a prediction about any particular client.

Scheme	No auth
Protected-resource metadata	✓Published (RFC 9728)
Anonymous access	Handshake succeeds; 55 tools listable
Credentials demanded in prose	✕email_security_posture These tools are listed anonymously and their own descriptions ask for an account or key, but no challenge is issued — so a client has nothing to act on and the refusal arrives as a tool error.

What the probe found

warningTools needing credentials are listed without a challenge

1 of the 55 tools listed anonymously say in their own descriptions that they need an account or a key (email_security_posture), but the endpoint issued no WWW-Authenticate challenge. The requirement is stated only in prose, so a call reaches the tool and comes back as a tool error instead of an authorization step.

Tools

asn_lookupatlas_case_study_lookupatlas_case_study_searchatlas_technique_lookupatlas_technique_searchaudit_domainbrand_assetsbulk_atlas_technique_lookupbulk_cve_lookupbulk_ioc_lookupbulk_sigma_rule_lookupcalculate_risk_scorecheck_dependenciescheck_headerscheck_injectioncheck_secretscontrast_scancve_leadingcve_lookupcve_searchcwe_lookupd3fend_attack_coveraged3fend_defense_for_attackd3fend_defense_lookupd3fend_defense_searchdns_lookupdomain_reportemail_disposableemail_mxemail_security_postureemail_verifyexploit_lookupgeo_auditget_cvss_detailshash_lookupioc_lookupip_lookupkev_detailpassword_checkphishing_checkphone_lookupredirect_chainrobots_txtscan_headersseo_auditsigma_rule_lookupssl_checksubdomain_enumtech_fingerprinttech_stack_cve_auditthreat_intelthreat_reportusername_lookupwayback_lookupwhois_lookup

Contract history

24 Aug 2026v1.36.0first recorded contract

Get alerted when this contract changes

Depend on this server? Leave an email and get a message when a probe records a change — a tool removed, an argument newly required, an enum narrowed. Alerts are being built; signing up is what tells us to hurry.

Prefer a feed reader? This page's contract changes are also an Atom feed.

Status badge

Status for a README, from the last probe — cached an hour, so up to seven hours behind the endpoint. Links back to this page.

[![MCP status](https://mcpi.app/servers/contrastapi/badge.svg)](https://mcpi.app/servers/contrastapi)