Skip to main content
Glama
UPinar

contrastapi

by UPinar
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Hybrid

Related Servers

Alternatives to contrastapi

  • mcp-shodan

    w0h1v
    A
    license
    A
    quality
    A
    maintenance
    MCP server for querying the Shodan API and Shodan CVEDB. This server provides tools for IP lookups, device searches, DNS lookups, vulnerability queries, CPE lookups, and more.
    7
    661 npm
    178
    MIT

  • VirusTotal MCP Server

    w0h1v
    A
    license
    A
    quality
    B
    maintenance
    A MCP server for querying the VirusTotal API. This server provides tools for scanning URLs, analyzing file hashes, and retrieving IP address reports.
    11
    1,562 npm
    151
    MIT

Related Servers

  • security-mcp

    pratham-jain33
    A
    license
    Not graded
    quality
    C
    maintenance
    Zero-key security toolkit for your AI assistant: grade any website's security A+ to F, check if CVEs are actively exploited via CISA KEV and EPSS, and get MITRE ATT&CK defenses explained in plain English. No API keys, no signup.
    MIT

  • Dechonet MCP

    node-man
    A
    license
    A
    quality
    B
    maintenance
    Domain security reconnaissance for AI agents — 13 tools (DNS+DNSSEC, SSL/TLS, HTTP security headers, SPF/DKIM/DMARC email auth, port scan, ASN, RDAP/WHOIS) plus a one-shot security_scan returning a 0–100 Health Score (A–F). Free, no API key.
    30
    1,404 npm
    1
    MIT

  • Nullcone MCP Server

    maco144
    F
    license
    Not graded
    quality
    D
    maintenance
    Provides real-time threat intelligence for AI agents, enabling checks on IPs, domains, URLs, hashes, CVEs, prompt-injection payloads, and malicious AI-skill/MCP-tool definitions against a free database of 890K+ IOCs.
    -
Deploy Server
One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

TDQS

A4.1/5.0

Scored across 55 tools

Disambiguation3/5

Descriptions diligently navigate overlaps (e.g., 'use ioc_lookup for single, bulk_ioc_lookup for batch'), which helps, but several clusters are genuinely confusable: domain_report vs audit_domain vs contrast_scan, ip_lookup vs threat_report, and especially email_mx vs email_security_posture vs email_verify all cover SPF/DMARC/DKIM posture. The lookup/search/bulk families for CVE, ATLAS, D3FEND and Sigma add many near-sibling tools whose boundaries must be inferred from prose.

Naming Consistency3/5

All names are snake_case, which keeps things readable, and families are internally consistent (X_lookup, X_search, bulk_X, d3fend_X). However, verb position is mixed: noun-first forms like ssl_check, dns_lookup, whois_lookup coexist with verb-first forms like check_headers, scan_headers, calculate_risk_score, get_cvss_details, so there is no single predictable pattern.

Tool Count2/5

55 tools is well above the 25+ heavy threshold and includes substantial redundancy: explicit bulk twins for ioc, cve, atlas technique, and sigma lookups, plus three overlapping email-auth tools and multiple IP/domain recon tools that could be consolidated. The domain is broad enough that some sprawl is defensible, but the surface is larger than necessary.

Completeness5/5

Coverage is exceptionally thorough: indicators, malware/hash, domain/DNS/WHOIS/SSL/subdomains, email auth, CVE lifecycle (search, leading, detail, KEV, CVSS parsing, risk scoring, exploits, CWE), and MITRE ATT&CK/ATLAS/D3FEND/Sigma catalogs all have lookup plus search/bulk variants. Almost every entity supports both drill-down and discovery, leaving no significant dead ends.

Maintenance

ActivityActive
ResponsivenessWithin a week

Resources