MCP server with 55 security intelligence tools — CVE/KEV, MITRE ATLAS+D3FEND, Sigma detection rules, email security posture (SPF/DMARC), domain & web intel, threat intel.

MCP server with 53 security intelligence tools — CVE/KEV, MITRE ATLAS+D3FEND, Sigma detection rules, email security posture (SPF/DMARC), domain & web intel, threat intel.

uptime_30d 1.0%; p95 595.3ms; conformance: fail

Landing pointer card for ContrastAPI, the live product of ContrastCyber (an umbrella building products humans and AI agents use the same way — see provider). ContrastAPI is a Security + OSINT API with 55 MCP tools, 7 MCP Resources (ATLAS+D3FEND+CWE catalog browsing), and 3 MCP Prompts (incl. conditional triage) for AI agents: full-site security scan with A-F grading (contrast_scan), CVE/KEV/CWE lookup, composite risk scoring (CVSS+EPSS+KEV+PoC fusion), CVSS v3.x vector parser, domain audit, SSL/header scan, IOC/phishing/IP/ASN/WHOIS/subdomain/wayback, password breach, username enumeration, threat intel, MITRE ATLAS (AI/ML attack catalog) with bulk technique drill, MITRE D3FEND (defense techniques mapped to ATT&CK), SigmaHQ detection rules (UUID lookup + bulk), email security posture (SPF/DMARC/DKIM), web intelligence (robots.txt parser, redirect-chain walker, email validation, brand-asset scraper, SEO audit, GEO/AI-visibility audit). All execution interfaces are served by api.contrastcyber.com; the full agent card with the complete skill list is at https://api.contrastcyber.com/.well-known/agent-card.json

MCP server with 55 security intelligence tools — CVE/KEV, MITRE ATLAS+D3FEND, Sigma detection rules, email security posture (SPF/DMARC), domain & web intel, threat intel.

Hardware-aware threat intel for ICS/SCADA environments. 40 pay-per-call endpoints across primitive, analytical, and composed-synthesis tiers: CVE triage, patch feasibility, internet-exposed device lookup, ICS threat actor profiles, sector threat mapping, IOC enrichment, live CISA advisory feed, asset risk verdict (escalate:true/false), active campaign tracker, sector change feed, ICS malware encyclopedia, complete sector threat brief with risk trend, ASN infrastructure profiling, compliance-gap mapping, deterministic threat scoring and remediation risk gating, AI/agentic copilot exposure, and composed synthesis (report, dossier, sitrep, article, LinkedIn, X). DeepSeek-enriched. No API keys — pure USDC micropayments on Base via x402.

Hardware-aware threat intel for ICS/SCADA environments. 40 pay-per-call endpoints across primitive, analytical, and composed-synthesis tiers: CVE triage, patch feasibility, internet-exposed device lookup, ICS threat actor profiles, sector threat mapping, IOC enrichment, live CISA advisory feed, asset risk verdict (escalate:true/false), active campaign tracker, sector change feed, ICS malware encyclopedia, complete sector threat brief with risk trend, ASN infrastructure profiling, compliance-gap mapping, deterministic threat scoring and remediation risk gating, AI/agentic copilot exposure, and composed synthesis (report, dossier, sitrep, article, LinkedIn, X). DeepSeek-enriched. No API keys — pure USDC micropayments on Base via x402.

skills: {'id': 'brain', 'name': 'Research e informes (brain)', 'description': 'Investigación profunda multi-fuente y síntesis de informes verificados. Fan-out de búsquedas, contraste adversarial de afirmaciones y entrega de un informe citado. Cobro por llamada o por resultado (per-call / per-outcome).', 'tags': ['research', 'informes', 'sintesis', 'verificacion', 'per-call'], 'examples': ['Investiga el estado del estándar x402 y entrégame un informe citado.', 'Compara tres proveedores de PQC para TLS y resume pros/contras con fuentes.'], 'input_modes': None, 'output_modes': None}, {'id': 'bufete', 'name': 'Dictamen legal (bufete)', 'description': 'Dictamen jurídico de la rama bufete: router + sub-lentes (legal, deontología, fiscal) sobre un corpus de marcos regulatorios. Devuelve análisis fundamentado con citas a la norma. NO sustituye asesoría colegiada vinculante.', 'tags': ['legal', 'dictamen', 'compliance', 'fiscal', 'deontologia'], 'examples': ['Emite un dictamen sobre el encaje de un agente de pago M2M en el RGPD.', '¿Qué obligaciones de KYB aplican a un marketplace de agentes en la UE?'], 'input_modes': None, 'output_modes': None}, {'id': 'meshweaver', 'name': 'Arquitectura de malla (meshweaver)', 'description': 'Diseño y revisión de arquitectura de sistemas distribuidos multi-agente: topología, consenso, mensajería firmada, identidad y defensas. Entrega un diseño razonado con frenos de seguridad y plan reversible.', 'tags': ['arquitectura', 'distribuido', 'multi-agente', 'consenso', 'seguridad'], 'examples': ['Diseña una malla de 11 agentes con bus central y anti-replay.', 'Revisa mi arquitectura A2A y señala dónde falta no-repudio.'], 'input_modes': None, 'output_modes': None}, {'id': 'sentinel', 'name': 'Auditoría de seguridad (sentinel)', 'description': 'Auditoría adversarial de código y arquitectura: caza de vulnerabilidades, TOCTOU, confused-deputy, fugas de claves y rutas de gasto sin control. Entrega hallazgos priorizados con prueba de concepto y mitigación.', 'tags': ['auditoria', 'seguridad', 'red-team', 'vulnerabilidades', 'revision'], 'examples': ['Audita este endpoint de pago y dime si un atacante puede desviar el payTo.', 'Busca TOCTOUs en mi flujo de consumo de mandatos firmados.'], 'input_modes': None, 'output_modes': None}; conformance: fail

Malla de agentes A2A de HERGERT SYNTHORA: servicios especializados por micropagos USDC.

Real-time Telegram threat intelligence API: IOC extraction, C2 infrastructure, threat actor profiles, breach disclosures, early attack intent signals, and ASN infrastructure profiling. AI-enriched with MITRE ATT&CK tagging and confidence scoring. No API keys — USDC micropayments on Base via x402.

Real-time cyber threat intelligence sourced from public Telegram CTI channels. Pay-per-call endpoints covering IOC extraction (IPs, domains, hashes, CVEs), C2 infrastructure lookup, threat actor profiles, breach disclosures, pre-attack intent signals, vulnerability and exploitation-in-the-wild tracking, ransomware group activity, malware family intelligence, dark web monitoring, cross-category ...