ContrastAPI

This is a security intelligence server that wraps 53 operations across vulnerability databases, threat intel, and domain reconnaissance into a single MCP endpoint. You get CVE/KEV/CWE lookups with EPSS scoring, MITRE ATLAS and D3FEND mappings, Sigma rule search, SPF/DMARC checks, IP reputation, IOC enrichment, and web intelligence tools like redirect chain analysis and robots.txt parsing. It runs composite risk scoring that fuses CVSS, EPSS, KEV status, and public exploit availability into a single metric. The server is free with a 30 credit per hour rate limit and requires no API key. Responses include verdict metadata so downstream agents can verify claims against upstream sources like NVD or RDAP, and CVE records suggest next tool calls via pivot hints.