Skip to main content
Glama
Sign In
contrastapi

contrastapi

by UPinar
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Hybrid

Related Servers

Alternatives to contrastapi

  • mcp-shodan

    w0h1v
    A
    license
    A
    quality
    B
    maintenance
    MCP server for querying the Shodan API and Shodan CVEDB. This server provides tools for IP lookups, device searches, DNS lookups, vulnerability queries, CPE lookups, and more.
    7
    2,211 npm
    189
    MIT

  • VirusTotal MCP Server

    w0h1v
    A
    license
    A
    quality
    B
    maintenance
    A MCP server for querying the VirusTotal API. This server provides tools for scanning URLs, analyzing file hashes, and retrieving IP address reports.
    11
    1,694 npm
    155
    MIT

Related Servers

  • security-mcp

    pratham-jain33
    A
    license
    Not graded
    quality
    C
    maintenance
    Zero-key security toolkit for your AI assistant: grade any website's security A+ to F, check if CVEs are actively exploited via CISA KEV and EPSS, and get MITRE ATT&CK defenses explained in plain English. No API keys, no signup.
    MIT

  • Security Intel MCP

    datakoot
    A
    license
    A
    quality
    B
    maintenance
    Vulnerability intelligence for AI agents that enables CVE lookup, package vulnerability checks, and dependency auditing without API keys.
    5
    MIT

  • Dechonet MCP

    node-man
    A
    license
    A
    quality
    B
    maintenance
    Domain security reconnaissance for AI agents — 13 tools (DNS+DNSSEC, SSL/TLS, HTTP security headers, SPF/DKIM/DMARC email auth, port scan, ASN, RDAP/WHOIS) plus a one-shot security_scan returning a 0–100 Health Score (A–F). Free, no API key.
    33
    687 npm
    1
    MIT

  • secintel-mcp

    blonde-almond
    A
    license
    Not graded
    quality
    C
    maintenance
    Gives AI agents security-analyst lookups: CVE triage with P1–P4 prioritisation from NVD, EPSS and CISA KEV data, vulnerability checks for open-source packages via OSV.dev, and indicator extraction, defanging and refanging of free text. It runs on free public sources with no API keys required.
    MIT
Deploy Server
One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

TDQS

A4.1/5.0

Scored across 55 tools

Disambiguation3/5

Descriptions diligently navigate overlaps (e.g., 'use ioc_lookup for single, bulk_ioc_lookup for batch'), which helps, but several clusters are genuinely confusable: domain_report vs audit_domain vs contrast_scan, ip_lookup vs threat_report, and especially email_mx vs email_security_posture vs email_verify all cover SPF/DMARC/DKIM posture. The lookup/search/bulk families for CVE, ATLAS, D3FEND and Sigma add many near-sibling tools whose boundaries must be inferred from prose.

Naming Consistency3/5

All names are snake_case, which keeps things readable, and families are internally consistent (X_lookup, X_search, bulk_X, d3fend_X). However, verb position is mixed: noun-first forms like ssl_check, dns_lookup, whois_lookup coexist with verb-first forms like check_headers, scan_headers, calculate_risk_score, get_cvss_details, so there is no single predictable pattern.

Tool Count2/5

55 tools is well above the 25+ heavy threshold and includes substantial redundancy: explicit bulk twins for ioc, cve, atlas technique, and sigma lookups, plus three overlapping email-auth tools and multiple IP/domain recon tools that could be consolidated. The domain is broad enough that some sprawl is defensible, but the surface is larger than necessary.

Completeness5/5

Coverage is exceptionally thorough: indicators, malware/hash, domain/DNS/WHOIS/SSL/subdomains, email auth, CVE lifecycle (search, leading, detail, KEV, CVSS parsing, risk scoring, exploits, CWE), and MITRE ATT&CK/ATLAS/D3FEND/Sigma catalogs all have lookup plus search/bulk variants. Almost every entity supports both drill-down and discovery, leaving no significant dead ends.

Maintenance

ActivityActive
ResponsivenessUsually handled

Resources