MCP Setup

Give your AI agent 55 security tools, 7 catalog resources, and a triage prompt. One config, zero signup.

Docs: API Documentation · MCP Documentation

1 Claude Desktop

One-click: download the latest .mcpb extension and double-click it (or Settings → Extensions → Install Extension…). No config file needed.

Or configure manually — edit ~/.claude/claude_desktop_config.json:

json{
  "mcpServers": {
    "contrastapi": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://api.contrastcyber.com/mcp/"]
    }
  }
}

Restart Claude Desktop. Done.

2 Cursor

Add to .cursor/mcp.json in your project root:

json{
  "mcpServers": {
    "contrastapi": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://api.contrastcyber.com/mcp/"]
    }
  }
}

3 VS Code (Claude Code)

Add to .mcp.json in your project root:

json{
  "mcpServers": {
    "contrastapi": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://api.contrastcyber.com/mcp/"]
    }
  }
}

4 Windsurf

Add to ~/.codeium/windsurf/mcp_config.json:

json{
  "mcpServers": {
    "contrastapi": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://api.contrastcyber.com/mcp/"]
    }
  }
}

5 OpenClaw

Run this command in your terminal (adds ContrastAPI to OpenClaw's gateway config):

bashopenclaw mcp set contrastapi '{"url":"https://api.contrastcyber.com/mcp/","transport":"streamable-http"}'

Or edit your OpenClaw config directly and add under mcp.servers:

json{
  "mcp": {
    "servers": {
      "contrastapi": {
        "url": "https://api.contrastcyber.com/mcp/",
        "transport": "streamable-http"
      }
    }
  }
}

6 LM Studio

One-click install (requires LM Studio 0.3.17+):

Add to LM Studio

Or add manually via Program → Install → Edit mcp.json:

json{
  "mcpServers": {
    "contrastapi": {
      "url": "https://api.contrastcyber.com/mcp/"
    }
  }
}

7 Any MCP Client (HTTP)

Use the remote HTTP transport directly:

httpPOST https://api.contrastcyber.com/mcp/
Content-Type: application/json
Accept: application/json, text/event-stream

{"jsonrpc":"2.0","id":1,"method":"initialize",
 "params":{"protocolVersion":"2025-11-25",
   "capabilities":{},
   "clientInfo":{"name":"my-app","version":"1.0"}}}

8 Pro API Key (optional)

Free tier (30 tokens/hr) works without a key. Add a Pro key to unlock 500 tokens/hr and full AbuseIPDB + Shodan reputation enrichment on /v1/domain/, /v1/ip/, and /v1/threat-report/.

stdio transport (Claude Desktop, Cursor, VS Code, Windsurf, Cline) — pass the key via mcp-remote's --header flag; env holds the raw value:

json{
  "mcpServers": {
    "contrastapi": {
      "command": "npx",
      "args": [
        "-y", "mcp-remote", "https://api.contrastcyber.com/mcp/",
        "--header", "Authorization: Bearer ${CONTRASTAPI_API_KEY}"
      ],
      "env": { "CONTRASTAPI_API_KEY": "cc_..." }
    }
  }
}

HTTP transport (LM Studio, OpenClaw, generic HTTP clients) — add headers:

json{
  "mcpServers": {
    "contrastapi": {
      "url": "https://api.contrastcyber.com/mcp/",
      "headers": { "Authorization": "Bearer cc_..." }
    }
  }
}