Security intelligence API and MCP server for AI agents. 29 tools, 39+ endpoints: CVE/EPSS/KEV, domain recon + audit, IP threat reports, SSL, bulk lookups, threat intel, email security, code scanning.
# ContrastAPI — 29 Security Tools for AI Agents
<p align="center">
<img src="app/static/banner.png" alt="ContrastAPI Banner" width="100%">
</p>
[](LICENSE)
[](https://python.org)
[](https://github.com/UPinar/contrastapi/actions)
[](https://modelcontextprotocol.io)
[](https://smithery.ai/servers/contrastcyber/contrastapi)
[](https://www.npmjs.com/package/contrastapi)
[](https://marketplace.visualstudio.com/items?itemName=ContrastAPI.contrastapi)
**Security intelligence API and MCP server for AI agents.** Domain audit, CVE lookup with EPSS+KEV, IP threat reports, IOC enrichment, tech fingerprinting, and 23 more. **Free, no API key, 100 credits/hour.**
**English** | [中文](README_CN.md) · **Live:** [api.contrastcyber.com](https://api.contrastcyber.com)
---
## 30-Second Setup
Pick your integration:
### Option 1: MCP (Claude Desktop / Cursor / VS Code / Windsurf / OpenClaw)
Add to your MCP config:
{
"mcpServers": {
"contrastapi": {
"command": "npx",
"args": ["-y", "mcp-remote", "https://api.contrastcyber.com/mcp/"]
}
}
}
Restart your agent. Done. Full setup guide: **[api.contrastcyber.com/mcp-setup](https://api.contrastcyber.com/mcp-setup)**
### Option 2: Node.js SDK
```bash
npm install contrastapi
```
```javascript
const api = require("contrastapi")();
const audit = await api.domain.audit("example.com"); // full audit
const cve = await api.cve.lookup("CVE-2024-3094"); // EPSS + KEV
const ip = await api.ip.threatReport("8.8.8.8"); Agent that generates comprehensive documentation, API references, architecture diagrams, and developer onboarding guides from existing code.
Agent configuration for systematic bug investigation that traces issues from error logs through the codebase to root cause with suggested fixes.
Agent for integrating third-party APIs including SDK setup, type generation, error handling, retry logic, and rate limit management.
Cursor's built-in autonomous coding agent that can make multi-file edits, run terminal commands, search the codebase, and iteratively build features with minimal human intervention.
Cloud-based autonomous coding agent that runs in the background on remote sandboxed environments, handling complex multi-step tasks while you continue working.
Cursor's multi-file editing agent within Composer mode that can create, edit, and delete files across your entire project in a single conversation.