{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_fmbfsrjm858e","handle":"contrastapi-2","url":"https://wellknown.network/agents/contrastapi-2","links":{"self":"https://wellknown.network/agents/contrastapi-2/record.json","html":"https://wellknown.network/agents/contrastapi-2","markdown":"https://wellknown.network/agents/contrastapi-2/record.md","api":"https://wellknown.network/api/v1/agents/contrastapi-2","status":"https://wellknown.network/api/v1/agents/contrastapi-2/status","claim":"https://wellknown.network/agents/contrastapi-2/claim","claimApi":"https://wellknown.network/api/v1/claims","badge":"https://wellknown.network/agents/contrastapi-2/badge.svg","openapi":"https://wellknown.network/openapi.json"},"ard":{"identifier":"urn:air:contrastcyber.com:agent:contrastapi-2","type":"application/a2a-agent-card+json"},"kind":"agent","declared":{"name":"ContrastAPI","summary":"Landing pointer card for ContrastAPI, the live product of ContrastCyber (an umbrella building products humans and AI agents use the same way — see provider). ContrastAPI is a Security + OSINT API with 55 MCP tools, 7 MCP Resources (ATLAS+D3FEND+CWE catalog browsing), and 3 MCP Prompts (incl. condit…","description":"Landing pointer card for ContrastAPI, the live product of ContrastCyber (an umbrella building products humans and AI agents use the same way — see provider). ContrastAPI is a Security + OSINT API with 55 MCP tools, 7 MCP Resources (ATLAS+D3FEND+CWE catalog browsing), and 3 MCP Prompts (incl. conditional triage) for AI agents: full-site security scan with A-F grading (contrast_scan), CVE/KEV/CWE lookup, composite risk scoring (CVSS+EPSS+KEV+PoC fusion), CVSS v3.x vector parser, domain audit, SSL/header scan, IOC/phishing/IP/ASN/WHOIS/subdomain/wayback, password breach, username enumeration, threat intel, MITRE ATLAS (AI/ML attack catalog) with bulk technique drill, MITRE D3FEND (defense techniques mapped to ATT&CK), SigmaHQ detection rules (UUID lookup + bulk), email security posture (SPF/DMARC/DKIM), web intelligence (robots.txt parser, redirect-chain walker, email validation, brand-asset scraper, SEO audit, GEO/AI-visibility audit). All execution interfaces are served by api.contrastcyber.com; the full agent card with the complete skill list is at https://api.contrastcyber.com/.well-known/agent-card.json","publisher":{"name":"ContrastCyber","url":"https://contrastcyber.com"},"homepage":"https://api.contrastcyber.com/quickstart","repository":null,"version":"1.35.1","license":null,"protocols":["a2a"],"tags":["security","scan","grade","audit","cve","vulnerability","osint","domain","ssl","threat-intel","ip","ai-ml","atlas","mitre","d3fend","defense","attack"],"pricing":null,"endpoints":[{"url":"https://contrastcyber.com","type":"a2a","auth":"apikey,http","probeable":true}],"skills":[{"id":"contrast_scan","name":"Contrast Scan","tags":["security","scan","grade","audit"],"description":"Full-site security scan — 11 checks (SSL, headers, DNS, DNSSEC, cookies, redirects, info disclosure, HTTP methods, CORS, HTML analysis, CSP) scored out of 100 points with a single A-F grade"},{"id":"cve_lookup","name":"CVE Lookup","tags":["security","cve","vulnerability"],"description":"Look up CVE details with CVSS, EPSS, KEV, patch info"},{"id":"audit_domain","name":"Domain Audit","tags":["osint","domain"],"description":"Full-stack domain security audit"},{"id":"ssl_check","name":"SSL/TLS Check","tags":["security","ssl"],"description":"Certificate validation + grading (A-F)"},{"id":"threat_intel","name":"Threat Intel","tags":["threat-intel"],"description":"Multi-source threat lookup"},{"id":"ip_lookup","name":"IP Lookup","tags":["osint","ip"],"description":"IP geolocation, ASN, reputation"},{"id":"atlas_technique_lookup","name":"ATLAS Technique Lookup","tags":["security","ai-ml","atlas","mitre"],"description":"MITRE ATLAS (AI/ML attack catalog) technique lookup by id (AML.T####). Returns tactics, maturity, ATT&CK bridge, pivot hints"},{"id":"d3fend_defense_for_attack","name":"D3FEND Reverse Lookup","tags":["security","d3fend","defense","mitre","attack"],"description":"Given an ATT&CK T-code, return all D3FEND defenses that mitigate it. Bridges offensive intel (CVE/ATLAS/ATT&CK) to defensive playbook"}],"tools":["Contrast Scan","CVE Lookup","Domain Audit","SSL/TLS Check","Threat Intel","IP Lookup","ATLAS Technique Lookup","D3FEND Reverse Lookup"],"extra":{"inputModes":["text","application/json"],"outputModes":["application/json"],"capabilities":{"streaming":true,"pushNotifications":false,"stateTransitionHistory":false},"protocolVersion":"0.3.0"},"attribution":{"kind":"a2a_card","name":"a2a_card","summary":"a2a_card","version":"a2a_card","description":"a2a_card","homepageUrl":"a2a_card","publisherUrl":"a2a_card","publisherName":"a2a_card"}},"derived":{"capabilities":[{"slug":"code.security-review","name":"Security Review","confidence":1,"provenance":"declared"},{"slug":"documents.ocr","name":"OCR","confidence":1,"provenance":"declared"},{"slug":"commerce.ecommerce","name":"E-commerce Operations","confidence":0.814,"provenance":"derived"},{"slug":"ai.evaluation","name":"Evaluation & Benchmarks","confidence":0.802,"provenance":"derived"},{"slug":"ai.prompting","name":"Prompt Management","confidence":0.791,"provenance":"derived"}],"categories":["ai","code","commerce","documents"]},"observed":{"status":"unknown","statusReason":"Not checked yet.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":null},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"a2a_card","key":"https://contrastcyber.com/.well-known/agent-card.json","url":"https://contrastcyber.com/.well-known/agent-card.json","firstSeenAt":"2026-09-05T18:25:48.983Z","fetchedAt":"2026-09-05T18:25:48.983Z","normalizedAt":"2026-09-05T18:25:48.983Z"}]},"firstSeenAt":"2026-09-05T18:25:48.983Z","updatedAt":"2026-09-05T18:25:51.107Z"}