Add ContrastAPI MCP Server — security intelligence

[UPinar]

Adds ContrastAPI to the MCP Security Servers section.

Open-source remote MCP server with 33 cascade-aware security tools. Each response emits next_calls workflow hints so AI agents chain related lookups automatically (e.g. cve_lookup → exploit_lookup → kev_detail → cwe_lookup).

Tool categories:

• CVE/exploit: CVE lookup with EPSS + CISA KEV, MITRE CWE catalog (944 entries), exploit search, KEV detail, CWE lookup, bulk CVE, CVE search/leading
• Domain recon: DNS, WHOIS, SSL grade, subdomain enumeration (CT logs), tech fingerprinting, header scanning, WAF detection, audit
• IP reputation: GreyNoise, AbuseIPDB, Shodan, ASN, FireHOL, IOC, threat report
• OSINT: username, phone, email (MX, disposable, SPF/DMARC/DKIM), hash, password breach
• IOC enrichment: ThreatFox, MalwareBazaar, Feodo, URLhaus, threat intel
• Code security: secrets detection, injection detection, dependency scan, header validation
• Wayback: historical URL snapshots

Free tier, no API key required. Streamable-HTTP transport (one-line install, no local setup):

claude mcp add --transport http contrastapi https://api.contrastcyber.com/mcp/

• GitHub: https://github.com/UPinar/contrastapi
• Live: https://api.contrastcyber.com