ContrastAPI — Claude Code MCP server: features and setup
ContrastAPI gives AI agents tools to investigate vulnerabilities, domains, and IP addresses. Use it to look up threat data or check code security.
claude mcp add --transport http api https://api.contrastcyber.com/mcp/What ContrastAPI does
The server offers 55 tools and 7 resources for working with vulnerability and threat data. It can look up CVE, KEV, and CWE records, investigate domains and IP addresses, enrich IOCs, check code security, and retrieve web intelligence. Responses can include risk scores and estimates of exploit probability.
To connect it to Claude Code, run claude mcp add --transport http api https://api.contrastcyber.com/mcp/. No API key or signup is required. The server connects to a remote endpoint, so it does not run as a local service in your project.
What it helps with
- look up details for a CVE
- check whether a CVE appears in KEV
- investigate a domain or IP address
- enrich an indicator of compromise
- check code for security issues
Example prompts for the agent
- Look up CVE-2024-12345 and assess its risk.
- Investigate
example.comand gather security information about it. - Check this code snippet for vulnerabilities and explain the findings.
How to install ContrastAPI
Platform CLI: remote server
claude mcp add --transport http api https://api.contrastcyber.com/mcp/Platform CLI: remote server
codex mcp add contrastapi --url https://api.contrastcyber.com/mcp/Config file
{
"mcpServers": {
"contrastapi": {
"url": "https://api.contrastcyber.com/mcp/"
}
}
}Config file
{
"servers": {
"contrastapi": {
"type": "http",
"url": "https://api.contrastcyber.com/mcp/"
}
}
}Platform CLI: remote server
gemini mcp add -t http contrastapi https://api.contrastcyber.com/mcp/Step by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about ContrastAPI
How do I install ContrastAPI in Claude Code?
Run claude mcp add --transport http api https://api.contrastcyber.com/mcp/, then restart the agent.
What does ContrastAPI do?
It gives agents tools to look up vulnerability and threat data, investigate domains and IP addresses, check code security, and enrich IOCs.
Does ContrastAPI require an API key?
No. You can connect without an API key or signup.
