Loading…
54 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.
Do not connect
A critical issue was found. Do not connect this server as-is.
Scanned 9 days ago Due for re-check
A server can change after it's graded. Re-run the automated scan to refresh this report.
This grade is deterministic and reproducible: the same server surface always yields the same grade under a given algorithm version. It is a real automated assessment computed by the MCPGrade engine from what the probe actually observed — not a fabricated or opinion score. It is not a manual human pentest, so it can miss context-specific risks.
Every signal below was measured directly by the automated probe. The grade is derived only from evidence like this — nothing is assumed.
The contrastapi MCP server exposes 55 tools, focused primarily on communication, developer, and network capabilities. Its published description reads: "54 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score". It communicates over Streamable HTTP using the 2025-06-18 protocol revision, and does not require authorization to connect. MCPGrade currently rates contrastapi F — a critical issue was found and the server should not be connected as-is. Its most notable findings include "Cross-tool shadowing" and "Data-exfiltration parameters". This report is a deterministic, reproducible automated assessment: the same observed surface always yields the same grade under a given algorithm version, and it is refreshed as new scans arrive and free to read — but it is not a substitute for a manual human security review. Always re-check contrastapi's advertised tools, transport security, and authorization posture before connecting an autonomous agent or sharing sensitive context with it.
Add contrastapi to an MCP client using the endpoint below. Review the grade and findings above before granting an autonomous agent access.
MCP endpoint
https://api.contrastcyber.com/mcp/Streamable HTTP transport. This is the MCP endpoint, not a website — paste it into your MCP client server list rather than a browser.
Captured passively during the read-only scan. Click any value to find servers that match it.
The tools this server advertises via tools/list — names, purposes, and the parameters each accepts, exactly as enumerated read-only.
Query DNS, WHOIS, SSL, subdomains, and threat intel for a domain in one call. By default dns.txt is filtered to security-relevant entries (SPF, DMARC, DKIM, MTA-STS, TLS-RPT) and dns.total_txt_records
Perform comprehensive domain audit: combines domain_report + live HTTP security headers + technology fingerprinting. By default report.dns.txt is filtered to security-relevant entries (SPF, DMARC, DKI
Sorted worst-first. Each finding shows its severity, what it means, its OWASP MCP Top-10 mapping, and a recommended fix — the check id links to the exact methodology row that produced it.
tool: domain_report
A tool description tries to alter the model’s use of another tool.
stigations; use audit_domain for live headers + tech stack. Response carriesRecommendationDescriptions must describe only their own tool.
tool: audit_domain
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
30/hr (costs 6 tokens), Pro: 500/hr. Returns {domain, report, technolRecommendationRemove side-channel parameters; constrain tool inputs.
tool: audit_domain
A tool description tries to alter the model’s use of another tool.
audit: combines domain_report + live HTTP security headers + technology fingeRecommendationDescriptions must describe only their own tool.
tool: contrast_scan
Tools that execute commands / write files / make arbitrary requests are exposed without annotations or guards.
rs only. Active outbound fetch — a per-target eTLD+1 throttle (60 req/min) appRecommendationAnnotate destructive tools and require human approval.
tool: contrast_scan
A tool description tries to alter the model’s use of another tool.
ation scan; use audit_domain for passive recon (DNS/WHOIS/SSL/threat intel)RecommendationDescriptions must describe only their own tool.
tool: threat_report
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
30/hr (costs 6 tokens), Pro: 500/hr. Returns {ip, enrichment, abuseipRecommendationRemove side-channel parameters; constrain tool inputs.
tool: threat_report
A tool description tries to alter the model’s use of another tool.
domain data use domain_report. Note: nested asn block always returns at mostRecommendationDescriptions must describe only their own tool.
tool: dns_lookup
A tool description tries to alter the model’s use of another tool.
ll overview use domain_report. TXT records are returned raw (no filter) — `toRecommendationDescriptions must describe only their own tool.
tool: whois_lookup
A tool description tries to alter the model’s use of another tool.
full audit use domain_report. Free: 30/hr, Pro: 500/hr. Returns {domain, whoRecommendationDescriptions must describe only their own tool.
tool: ssl_check
A tool description tries to alter the model’s use of another tool.
omain audit use audit_domain. Free: 30/hr, Pro: 500/hr. Returns {grade, valiRecommendationDescriptions must describe only their own tool.
tool: subdomain_enum
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
rations without token bloat; pull tail entries by name when needed. FRecommendationRemove side-channel parameters; constrain tool inputs.
tool: subdomain_enum
A tool description tries to alter the model’s use of another tool.
s — capped at 5 ssl_check hints (one per first-five subdomain) so triageRecommendationDescriptions must describe only their own tool.
tool: tech_fingerprint
A tool description tries to alter the model’s use of another tool.
full audit use audit_domain. Free: 30/hr, Pro: 500/hr. Returns {technologieRecommendationDescriptions must describe only their own tool.
tool: threat_intel
A tool description tries to alter the model’s use of another tool.
correlation use ioc_lookup which adds ThreatFox and, for IPs, Feodo TrackeRecommendationDescriptions must describe only their own tool.
tool: wayback_lookup
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
estigate domain history and age; for full audit use domain_report. FreeRecommendationRemove side-channel parameters; constrain tool inputs.
tool: wayback_lookup
A tool description tries to alter the model’s use of another tool.
full audit use domain_report. Free: 30/hr, Pro: 500/hr. status='ok' means thRecommendationDescriptions must describe only their own tool.
tool: scan_headers
A tool description tries to alter the model’s use of another tool.
te headers; use check_headers to validate headers you already have. Free: 30/RecommendationDescriptions must describe only their own tool.
tool: email_mx
A tool description tries to alter the model’s use of another tool.
full audit use domain_report. Free: 30/hr, Pro: 500/hr. email_security.dkim_RecommendationDescriptions must describe only their own tool.
tool: email_disposable
A tool description tries to alter the model’s use of another tool.
ty + MX trust), domain_report on the email's domain (full recon), threat_inteRecommendationDescriptions must describe only their own tool.
tool: email_verify
A tool description tries to alter the model’s use of another tool.
2-3 tool calls (email_mx + email_disposable + manual role parse) with onRecommendationDescriptions must describe only their own tool.
tool: robots_txt
A tool description tries to alter the model’s use of another tool.
, brand_assets, redirect_chain) to honour the site's published rules. status_cRecommendationDescriptions must describe only their own tool.
tool: redirect_chain
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "url"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: redirect_chain
Tools that execute commands / write files / make arbitrary requests are exposed without annotations or guards.
actly as you'd `curl -L` it; the server handles encoding.","title":"RecommendationAnnotate destructive tools and require human approval.
tool: brand_assets
Tools that execute commands / write files / make arbitrary requests are exposed without annotations or guards.
rusted` (DO NOT execute or shell-out — the target controls these strings). Free:RecommendationAnnotate destructive tools and require human approval.
tool: phone_lookup
A tool description tries to alter the model’s use of another tool.
e correlation), email_disposable (throwaway-mail signal on associated email). FrRecommendationDescriptions must describe only their own tool.
tool: ip_lookup
A tool description tries to alter the model’s use of another tool.
+reputation use threat_report. Response is null-explicit: every field is alwaRecommendationDescriptions must describe only their own tool.
tool: cve_lookup
A tool description tries to alter the model’s use of another tool.
VE details; use cve_search for queries by product/severity. Response carriRecommendationDescriptions must describe only their own tool.
tool: calculate_risk_score
A tool description tries to alter the model’s use of another tool.
t orchestrating cve_lookup + exploit_lookup separately. PoC signal here isRecommendationDescriptions must describe only their own tool.
tool: get_cvss_details
A tool description tries to alter the model’s use of another tool.
_v2_vector from cve_lookup if you need v2 detail. Free: 30/hr, Pro: 500/hrRecommendationDescriptions must describe only their own tool.
tool: cve_search
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
T NVD-canonical-token matches (not the common name — e.g. nginx is 'nRecommendationRemove side-channel parameters; constrain tool inputs.
tool: cve_search
A tool description tries to alter the model’s use of another tool.
n's whole stack tech_stack_cve_audit (both auto-normalize tokens). Use for vulnerabiRecommendationDescriptions must describe only their own tool.
tool: cve_leading
A tool description tries to alter the model’s use of another tool.
ayload shape as cve_lookup; for drill-down on a single CVE prefer cve_lookRecommendationDescriptions must describe only their own tool.
tool: exploit_lookup
A tool description tries to alter the model’s use of another tool.
wild; run after cve_lookup to evaluate real-world risk. When the CVE is alRecommendationDescriptions must describe only their own tool.
tool: bulk_cve_lookup
A tool description tries to alter the model’s use of another tool.
default each CVE's affected_products is truncated to the first 20 entriesRecommendationDescriptions must describe only their own tool.
tool: kev_detail
A tool description tries to alter the model’s use of another tool.
V catalog — use cve_lookup for non-KEV CVEs. Best follow-up after cve_lookRecommendationDescriptions must describe only their own tool.
tool: cwe_lookup
A tool description tries to alter the model’s use of another tool.
ted). Use after cve_lookup or kev_detail to understand the underlying weakRecommendationDescriptions must describe only their own tool.
tool: atlas_technique_lookup
A tool description tries to alter the model’s use of another tool.
s_used), prefer bulk_atlas_technique_lookup. Returns 404 when the id is not in the synced ARecommendationDescriptions must describe only their own tool.
tool: bulk_atlas_technique_lookup
A tool description tries to alter the model’s use of another tool.
okup calls. Designed as the natural follow-up to atlas_case_study_lookup,RecommendationDescriptions must describe only their own tool.
tool: atlas_technique_search
A tool description tries to alter the model’s use of another tool.
n chaining from atlas_technique_lookup to skip self in sibling-tactic searches. Use thRecommendationDescriptions must describe only their own tool.
tool: atlas_case_study_lookup
A tool description tries to alter the model’s use of another tool.
_used array via bulk_atlas_technique_lookup in a single call (next_calls emits exactly thatRecommendationDescriptions must describe only their own tool.
tool: atlas_case_study_search
A tool description tries to alter the model’s use of another tool.
d it. Drill via atlas_case_study_lookup for the full procedure list. Free: 30/hr, Pro:RecommendationDescriptions must describe only their own tool.
tool: d3fend_defense_lookup
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
artifact (e.g. 'Access Token'). Response includes attack_techniques: the lisRecommendationRemove side-channel parameters; constrain tool inputs.
tool: d3fend_defense_lookup
A tool description tries to alter the model’s use of another tool.
ates. Use after d3fend_defense_search for the full record + ATT&CK chain. Returns 404RecommendationDescriptions must describe only their own tool.
tool: d3fend_defense_search
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
defenses harden access tokens?' (tactic=Harden + artifact='Access Token'). DrRecommendationRemove side-channel parameters; constrain tool inputs.
tool: d3fend_defense_search
A tool description tries to alter the model’s use of another tool.
n chaining from d3fend_defense_lookup to skip self in sibling-artifact searches. UseRecommendationDescriptions must describe only their own tool.
tool: d3fend_defense_for_attack
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
default 30) for token efficiency; `total` is the honest pre-truncatioRecommendationRemove side-channel parameters; constrain tool inputs.
tool: d3fend_defense_for_attack
A tool description tries to alter the model’s use of another tool.
book. Pair with cve_lookup or atlas_technique_lookup output — when those cRecommendationDescriptions must describe only their own tool.
tool: d3fend_attack_coverage
A tool description tries to alter the model’s use of another tool.
ging. Pair with cve_search per gap to identify exploit availability. Free:RecommendationDescriptions must describe only their own tool.
tool: sigma_rule_lookup
A tool description tries to alter the model’s use of another tool.
hnique_lookup / cve_lookup as natural follow-ups. Free: 30/hr, Pro: 500/hrRecommendationDescriptions must describe only their own tool.
tool: bulk_sigma_rule_lookup
A tool description tries to alter the model’s use of another tool.
le_lookup calls. Designed for triage workflows where multiple rule ids areRecommendationDescriptions must describe only their own tool.
tool: ioc_lookup
A tool description tries to alter the model’s use of another tool.
pe unknown; use threat_intel for domain-only, hash_lookup for richer MalwareRecommendationDescriptions must describe only their own tool.
tool: hash_lookup
A tool description tries to alter the model’s use of another tool.
ker + URLhaus), threat_intel (domain-level URLhaus check), exploit_lookup (lRecommendationDescriptions must describe only their own tool.
tool: password_check
A tool description tries to alter the model’s use of another tool.
ent namespace), email_disposable (throwaway-mail signal on associated accounts),RecommendationDescriptions must describe only their own tool.
tool: phishing_check
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "url"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: phishing_check
A tool description tries to alter the model’s use of another tool.
assessment; use threat_intel for domain-level checks. Companion threat-invesRecommendationDescriptions must describe only their own tool.
tool: bulk_ioc_lookup
A tool description tries to alter the model’s use of another tool.
overage matches ioc_lookup: hash → ThreatFox only; IP → ThreatFox + FeodoRecommendationDescriptions must describe only their own tool.
tool: check_secrets
Tools that execute commands / write files / make arbitrary requests are exposed without annotations or guards.
Java, Go, Ruby, Shell, Bash. Use to detect leaked credentials beforeRecommendationAnnotate destructive tools and require human approval.
tool: check_secrets
A tool description tries to alter the model’s use of another tool.
n detection use check_injection. Free: 30/hr, Pro: 500/hr. Returns {total, by_sRecommendationDescriptions must describe only their own tool.
tool: check_secrets
An exec/shell/run-code tool exposes a command/code/args parameter that is a free-form string with no enum/pattern guard — a direct command-injection / RCE surface. A tool constraining the command to an `enum` of allowed operations does not fire.
unconstrained command parameter "code"RecommendationReplace the free-form command with a fixed `enum` of allowed operations (or structured, escaped arguments) and require explicit human approval.
tool: check_injection
Tools that execute commands / write files / make arbitrary requests are exposed without annotations or guards.
Java, Go, Ruby, Shell, Bash. Use to detect input-handling bugs; for sRecommendationAnnotate destructive tools and require human approval.
tool: check_injection
A tool description tries to alter the model’s use of another tool.
er validation), scan_headers (live HTTP scan via domain). Free: 30/hr, Pro:RecommendationDescriptions must describe only their own tool.
tool: check_injection
An exec/shell/run-code tool exposes a command/code/args parameter that is a free-form string with no enum/pattern guard — a direct command-injection / RCE surface. A tool constraining the command to an `enum` of allowed operations does not fire.
unconstrained command parameter "code"RecommendationReplace the free-form command with a fixed `enum` of allowed operations (or structured, escaped arguments) and require explicit human approval.
tool: check_dependencies
A tool description tries to alter the model’s use of another tool.
X.Y.Z or later'.RecommendationDescriptions must describe only their own tool.
tool: check_headers
A tool description tries to alter the model’s use of another tool.
ic servers; use scan_headers to fetch live. Free: 30/hr, Pro: 500/hr. By defRecommendationDescriptions must describe only their own tool.
The server accepts tool enumeration (and likely invocation) with no authentication.
RecommendationRequire OAuth 2.1 authorization for any server exposing non-public tools.
tool: domain_report
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: audit_domain
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: contrast_scan
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: threat_report
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: dns_lookup
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: whois_lookup
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: ssl_check
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: subdomain_enum
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: tech_fingerprint
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: threat_intel
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: wayback_lookup
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: scan_headers
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: email_mx
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: email_security_posture
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: email_disposable
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: email_verify
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: robots_txt
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: robots_txt
The description pairs a fetch imperative with a hardcoded external URL, letting the server relocate its real instructions off-metadata and mutate them after review. Fires only when a fetch verb and a URL co-occur, so benign documentation links do not.
API/<version> (+https://contrastcyber.com/bot)` so site operators can identify + opt out viaRecommendationDo not direct the model to fetch and act on external URLs; treat linked content as untrusted.
tool: redirect_chain
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: brand_assets
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: seo_audit
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: geo_audit
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: phone_lookup
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: ip_lookup
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: ioc_lookup
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: hash_lookup
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: password_check
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: phishing_check
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: username_lookup
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: cve_lookup
An unusually long description is a common injection-padding tactic.
description length 2138 charsRecommendationKeep descriptions concise.
Vantaj uptime monitoring via MCP — manage monitors, heartbeats, incidents, and status pages.
Unified gateway to Algeria's TKAWEN ecosystem: commerce, certification, and AI tools.
Provides access to the Cohereon Doctrine AI safety framework with governance components, tiered access, and agent onboarding.
Agentic rails for complex workflows with receipts, fees, and MCP tool access.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Active website security scan: runs the ContrastScan C engine (11 modules — HTTP security headers, SSL/TLS, DNS, redirect chain, information disclosure, cookie flags, DNSSEC, HTTP methods, CORS, HTML h
Composite tech-stack + CVE audit (MCP-only, no REST endpoint). Detects technologies on the target domain, queries CVE database for known vulnerabilities per product, enriches top-10 CVE candidates wit
Query comprehensive threat profile for an IP: Shodan host data, AbuseIPDB reputation, ASN/geolocation, and open ports. Use for IP investigation and SOC alert triage; for domain data use domain_report.
Query all DNS record types (A, AAAA, MX, NS, TXT, CNAME, SOA) for a domain. Use for mail routing inspection, nameserver verification, or SPF/DMARC checks; for full overview use domain_report. TXT reco
Retrieve WHOIS registration data: registrar, creation/expiry dates, nameservers, status. Use to verify domain ownership, age, expiration; for full audit use domain_report. Free: 30/hr, Pro: 500/hr. Re
Analyze SSL/TLS certificate: grade (A/B/C/D/F), protocol version, cipher suite, chain, expiry, Subject Alternative Names, and structured validation findings. Invalid certs (expired, self-signed, hostn
Discover subdomains using passive methods: Certificate Transparency logs + DNS brute-force (no active probing). Use to map organization's attack surface; non-intrusive. Response carries next_calls — c
Detect website technology stack: CMS, frameworks, CDN, analytics tools, web servers, languages (via HTTP headers + HTML analysis). Use for passive reconnaissance; for full audit use audit_domain. Free
Check domain against abuse.ch URLhaus for known malware-distribution URLs (single source — for multi-feed correlation use ioc_lookup which adds ThreatFox and, for IPs, Feodo Tracker). Use for fast dom
Retrieve Wayback Machine snapshots for a domain: first capture, latest, total count, snapshot list. Use to investigate domain history and age; for full audit use domain_report. Free: 30/hr, Pro: 500/h
Perform live HTTP GET and analyze security headers: CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Permissions-Policy, Referrer-Policy. Use to audit live website headers; use check_headers to val
Analyze email security: MX records, SPF policy, DMARC policy, DKIM probe across common+date-based selectors, mail provider, grade. Use to verify email-auth setup and phishing risk; for full audit use
Analyze domain email authentication posture: SPF, DMARC, DKIM with numeric score and findings. Dual-use: red-team (spoofing feasibility) + blue-team (posture audit). Score 0-100, grades A+-F. DKIM pro
Check if email address uses a known disposable/temporary provider (Guerrilla Mail, Temp Mail, Mailinator, etc.). Use for input validation to detect throwaway signups; for domain reputation use threat_
One-call email validation combining syntax + MX records + disposable check + role-address detection (admin@/info@/...) + free-provider classification (gmail/outlook/yahoo/...). Use BEFORE adding an em
Fetch + parse the target domain's robots.txt — sitemaps, per-User-agent allow/disallow rules, crawl-delay, Host directive. Use BEFORE crawling/scraping a target site (seo_audit, brand_assets, redirect
Walk an HTTP redirect chain hop-by-hop, returning per-hop {url, status_code, location, latency_ms}. Use to deobfuscate URL shorteners (bit.ly / t.co / lnkd.in), audit suspicious links from phishing in
Scrape a domain's homepage `<head>` for public brand assets — favicon, og:image, theme-color, og:site_name, JSON-LD `Organization.logo`. Use to enrich CRM records, build company-card UIs, or correlate
One-shot SEO audit of a domain's homepage with a 0-100 composite score + a `missing_signals` list of concrete fixes. Use BEFORE pitching SEO work to a prospect, when triaging a lead's marketing maturi
Deterministic GEO / AI-visibility readiness audit of a domain's homepage with a 0-100 score + a `missing_signals` fix list. Answers "can AI assistants (ChatGPT, Claude, Perplexity, Google AI) discover
Validate and analyze phone number: country, region, carrier, line type (mobile/landline/VoIP), timezone, formatted versions. Use to verify phone legitimacy and detect fraud risks. Requires E.164 forma
Query comprehensive IP intelligence: reverse DNS, ASN + holder name + country inline (RIPE Stat, Phase 1), open ports, hostnames, vulnerabilities (Shodan InternetDB enriched with severity + cvss_v3 fr
Look up Autonomous System Number (ASN) for a domain or IP: AS number, organization, IPv4/IPv6 prefixes. Use to identify network operator and IP range ownership. Default returns first 50 prefixes per f
Retrieve detailed CVE data by ID: description, CVSS v3.1 + vector, CVSS v2 (always emitted), EPSS score + percentile, CISA KEV status (expanded: due_date, required_action, ransomware flag, vendor_proj
Composite CVE risk score (0-100) — fuses CVSS, EPSS, KEV, and PoC into a single agent-ready triage signal. Formula: CVSS*0.20 + EPSS*0.35 + KEV*0.30 + PoC*0.15 (each component rescaled to 0-100 before
Parse a CVSS v3.x vector string into a per-metric breakdown plus a recomputed base score. Returns the canonicalized vector, version (3.0 or 3.1), base_score, base_severity (NONE/LOW/MEDIUM/HIGH/CRITIC
Search CVE database with filters: product/vendor, severity, published date range, EPSS score, CWE, CVSS range, CISA KEV status. Default response is SLIM per-result (cve_id, summary, severity, cvss_v3,
List CVEs indexed from MITRE/GHSA BEFORE NVD publication (early-warning, freshest data). By default each result is slim (no description, no cvss_breakdown, no affected_products list, no references) —
Search public exploits/PoC for a specific CVE across three sources: (1) GitHub Advisory Database (sources.github.advisories[]), (2) Shodan CVEDB references (sources.shodan_refs.results[] — packetstorm
Batch query multiple CVEs (up to 50 per call, same for Free and Pro): retrieve full CVE details for all in 1 request instead of N. By default each CVE's affected_products is truncated to the first 20
Look up CISA KEV (Known Exploited Vulnerabilities) full record for a CVE. Returns federal patch deadline (due_date), CISA-specified required_action remediation, known ransomware association, vendor/pr
Look up MITRE CWE (Common Weakness Enumeration) catalog record from research view 1000. Default response is SLIM (first 3 mitigations, first 3 examples; extended_description is null) — pass include='f
Look up a MITRE ATLAS technique — the AI/ML adversarial attack catalog. ATLAS catalogues TTPs targeting machine learning systems: prompt injection, model evasion, training data poisoning, model theft,
Bulk ATLAS technique lookup — retrieve full records for up to 50 techniques in a single request instead of N separate atlas_technique_lookup calls. Designed as the natural follow-up to atlas_case_stud
Search the MITRE ATLAS catalog of AI/ML attack techniques by keyword, tactic, or maturity. Default response is SLIM (description truncated to 240 chars per row); pass include='full' for the verbose re
Look up a MITRE ATLAS case study — a documented real-world AI/ML attack incident. Each case study links a sequence of ATLAS techniques (techniques_used) to the incident. Default response is SLIM (desc
Search ATLAS case studies (real-world AI/ML attack incidents) by keyword or referenced technique. Default response is SLIM (description truncated to 240 chars per row); pass include='full' for the ver
Look up a MITRE D3FEND defense technique. D3FEND is the canonical defensive counterpart to ATT&CK — each defense is classified into one of 7 tactics (Model/Harden/Detect/Isolate/Deceive/Evict/Restore)
Search the MITRE D3FEND catalog of defensive techniques by keyword, tactic, or targeted artifact. Default response is SLIM (drops `uri` from each row — saves ~60 chars/row, ~30% on popular drills); pa
Reverse lookup: given an ATT&CK T-code, return D3FEND defenses that mitigate it. This is the bridge from offensive intelligence (ATT&CK / ATLAS / CVE) to defensive playbook. Pair with cve_lookup or at
Batch coverage breakdown: given a list of ATT&CK T-codes, return distinct defense counts per D3FEND tactic + identify which techniques have NO D3FEND mapping (undefended_techniques). Use to assess the
Look up a single Sigma detection rule by UUID from the SigmaHQ corpus (~3,200 rules, refreshed daily at 02:00 UTC). Returns the full rule with title, description, status (stable/test/experimental/depr
Bulk Sigma rule lookup — retrieve full records for up to 50 rule UUIDs in a single request instead of N separate sigma_rule_lookup calls. Designed for triage workflows where multiple rule ids are know
Enrich Indicator of Compromise (IP/domain/URL/hash) by auto-detecting type and querying abuse.ch feeds. Per-type source coverage: hash → ThreatFox only (Feodo and URLhaus do not index hashes); IP → Th
Query MalwareBazaar for file hash (MD5/SHA1/SHA256): malware family, file type, size, tags, first/last seen, download count. Use to check if file hash is known malware; use ioc_lookup for auto-detecti
Check if SHA-1 hash appears in Have I Been Pwned (HIBP) breach dataset using k-anonymity (5-char prefix only, full hash never leaves tool). Use for password breach audits; read-only, no data stored. C
Query URLhaus for a specific URL and its host. is_malicious is True only when there is ACTIVE evidence — exact URL match with url_status='online' (or unknown) OR host has urls_online > 0. URLhaus reta
Batch query multiple IOCs (IP/domain/URL/hash, up to 50 per call, same for Free and Pro) in 1 request: auto-detects type + queries abuse.ch feeds per-indicator. Per-type source coverage matches ioc_lo
Scan source code (or snippet) for hardcoded secrets — cloud provider keys, API tokens, connection strings, private keys, passwords. Supports Python, JavaScript, TypeScript, Java, Go, Ruby, Shell, Bash
Scan source code for injection vulnerabilities: SQL injection, command injection, path traversal via unsafe string concatenation/unsanitized input. Supports Python, JavaScript, TypeScript, Java, Go, R
Audit project dependencies (npm/PyPI/Maven/RubyGems/etc.) against CVE database: find known vulnerabilities in your package list. Bulk query up to 50 packages per call (same for Free and Pro). Use for
Search for username across 15+ social/dev platforms (GitHub, Reddit, X/Twitter, LinkedIn, Instagram, TikTok, Discord, YouTube, Keybase, HackerOne, etc.). Use for OSINT investigations and identity veri
Validate HTTP security headers you provide (JSON): CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Permissions-Policy, Referrer-Policy against best practices. Use to test header config before depl