# ContrastAPI

ContrastAPI gives AI agents tools to investigate vulnerabilities, domains, and IP addresses. Use it to look up threat data or check code security.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI · ★ 35
- Author: UPinar
- License: MIT · policy=link-only · description only; the file stays with the author
- Source: https://github.com/UPinar/contrastapi
- Updated: 2026-10-21
- HTML: https://affpapa.org/en/nevibecode/mcp/contrastapi

## What it does

The server offers 55 tools and 7 resources for working with vulnerability and threat data. It can look up CVE, KEV, and CWE records, investigate domains and IP addresses, enrich IOCs, check code security, and retrieve web intelligence. Responses can include risk scores and estimates of exploit probability.

To connect it to Claude Code, run `claude mcp add --transport http api https://api.contrastcyber.com/mcp/`. No API key or signup is required. The server connects to a remote endpoint, so it does not run as a local service in your project.

## Requirements
- Remote server: `https://api.contrastcyber.com/mcp/`

## Install

### Claude Code (native platform)

**Platform CLI: remote server**
```bash
claude mcp add --transport http api https://api.contrastcyber.com/mcp/
```

### Codex

**Platform CLI: remote server**
```bash
codex mcp add contrastapi --url https://api.contrastcyber.com/mcp/
```

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "contrastapi": {
            "url": "https://api.contrastcyber.com/mcp/"
        }
    }
}
```

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "contrastapi": {
            "type": "http",
            "url": "https://api.contrastcyber.com/mcp/"
        }
    }
}
```

### Gemini CLI

**Platform CLI: remote server**
```bash
gemini mcp add -t http contrastapi https://api.contrastcyber.com/mcp/
```

## When to use it
- look up details for a CVE
- check whether a CVE appears in KEV
- investigate a domain or IP address
- enrich an indicator of compromise
- check code for security issues

## Example prompts
- Look up CVE-2024-12345 and assess its risk.
- Investigate `example.com` and gather security information about it.
- Check this code snippet for vulnerabilities and explain the findings.

## Similar
- [REA](https://affpapa.org/en/nevibecode/mcp/rea.md) — MCP server · ★ 386989
- [GitHub](https://affpapa.org/en/nevibecode/mcp/github.md) — MCP server · ★ 33918
- [World Monitor](https://affpapa.org/en/nevibecode/mcp/world-monitor.md) — MCP server · ★ 89408
- [Netdata](https://affpapa.org/en/nevibecode/mcp/netdata.md) — MCP server · ★ 81115
- [Front-End Checklist](https://affpapa.org/en/nevibecode/mcp/front-end-checklist.md) — MCP server · ★ 74559
- [Scrapling MCP Server](https://affpapa.org/en/nevibecode/mcp/scrapling-mcp-server.md) — MCP server · ★ 89433

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md