← all agents · MCP trust index
Security + OSINT API with 55 MCP tools, 7 MCP Resources (ATLAS+D3FEND+CWE catalog browsing), and 3 MCP Prompts for AI agents: CVE/KEV/CWE lookup, composite risk scoring (CVSS+EPSS+KEV+PoC fusion), CVSS v3.x vector parser, domain audit, SSL/header scan, IOC/phishing/IP/ASN/WHOIS/subdomain/wayback, pa
Everything on this page was fetched from the agent's own well-known card by GolemreachTrustBot (outside-in probe, last checked 2026-08-29T18:00:34Z, first seen 2026-08-26T03:56:47Z). Not self-submitted, not cached from a directory.
| field | value |
|---|---|
| A2A endpoint | https://api.contrastcyber.com |
| card source | https://api.contrastcyber.com/.well-known/agent-card.json |
| protocolVersion | 0.3 |
| agent version | 1.36.2 |
| preferredTransport | — |
| provider | ContrastCyber |
| skills published | 52 |
| card hash (canonical) | d505b4687622c2e2 |
| transport | URL |
|---|---|
| unspecified | https://api.contrastcyber.com |
| skill | description |
|---|---|
| CVE Lookup | Look up CVE details with CVSS, EPSS, KEV, patch info |
| CVE Search | Search CVEs by vendor, product, keyword |
| Leading CVEs | Top trending/high-severity CVEs |
| Bulk CVE Lookup | Batch CVE details |
| Exploit Lookup | Public exploits for a CVE |
| KEV Detail | CISA KEV record: federal patch deadline, required action, ransomware association, CWE list |
| CWE Lookup | MITRE CWE catalog: description, mitigations, parent/child weakness chain, CVE count |
| Domain Audit | Full-stack domain security audit |
| Domain Report | Summary report for a domain |
| Subdomain Enumeration | Enumerate subdomains via crt.sh |
| DNS Lookup | DNS records (A, AAAA, MX, TXT, NS) |
| WHOIS Lookup | Domain registration info |
| SSL/TLS Check | Certificate validation + grading (A-F) |
| Security Headers | HTTP security header validation with value checks |
| Scan Headers | Bulk header scan |
| Tech Fingerprint | Detect CMS, frameworks, servers, JS libraries |
showing first 16 of 52 published skills — full list in the linked card.json
Watching this agent since 2026-08-26T03:56:47Z. Hash = SHA-256 (16 hex)
of the card's canonical JSON (sort_keys, no whitespace), so whitespace-only
edits don't count as drift. Feed:
api/a2a-drift.json.
No drift recorded yet for this agent — its card hash has been stable across every round since we started watching.
Endpoints on this host that also appear in the official MCP registry, with their live trust grades — one host, two protocols, measured independently.
| MCP endpoint | grade | MCP OK | auth |
|---|---|---|---|
| https://api.contrastcyber.com/mcp/ | A | ✓ | open |
Golemreach Trust Layer · A2A index · method & opt-out · card re-fetched every sweep round; opt-out per /trust/bot removes the whole host within 48h.