ContrastCyber builds products that humans and AI agents consume the same way — every capability exposed over MCP, REST and A2A. One umbrella, a growing family.
Security + OSINT intelligence API: CVE/KEV/CWE and exploit intelligence, composite risk scoring, domain/DNS/WHOIS/subdomain OSINT, SSL and security-header scanning, IOC/threat-intel/phishing checks, MITRE ATLAS + D3FEND catalogs, Sigma detection rules, email security posture — plus contrast_scan, a full-site security scan returning a single A–F grade.
Add it to any MCP client:
{
"mcpServers": {
"contrastapi": {
"type": "http",
"url": "https://api.contrastcyber.com/mcp/",
"headers": { "X-API-Key": "cc_YOUR_KEY" }
}
}
}
No API key needed for the free tier (30 requests/hour) — the X-API-Key above is optional, for higher limits.