{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_6qemzf46fbnj","handle":"contrastcyber-contrastapi","url":"https://wellknown.network/agents/contrastcyber-contrastapi","links":{"self":"https://wellknown.network/agents/contrastcyber-contrastapi/record.json","html":"https://wellknown.network/agents/contrastcyber-contrastapi","markdown":"https://wellknown.network/agents/contrastcyber-contrastapi/record.md","api":"https://wellknown.network/api/v1/agents/contrastcyber-contrastapi","status":"https://wellknown.network/api/v1/agents/contrastcyber-contrastapi/status","claim":"https://wellknown.network/agents/contrastcyber-contrastapi/claim","claimApi":"https://wellknown.network/api/v1/claims","badge":"https://wellknown.network/agents/contrastcyber-contrastapi/badge.svg","openapi":"https://wellknown.network/openapi.json"},"ard":{"identifier":"urn:air:api.contrastcyber.com:agent:contrastcyber-contrastapi","type":"application/a2a-agent-card+json"},"kind":"agent","declared":{"name":"ContrastAPI","summary":"Security + OSINT API with 55 MCP tools, 7 MCP Resources (ATLAS+D3FEND+CWE catalog browsing), and 3 MCP Prompts for AI agents: CVE/KEV/CWE lookup, composite risk scoring (CVSS+EPSS+KEV+PoC fusion), CVSS v3.x vector parser, domain audit, SSL/header scan, IOC/phishing/IP/ASN/WHOIS/subdomain/wayback, p…","description":"Security + OSINT API with 55 MCP tools, 7 MCP Resources (ATLAS+D3FEND+CWE catalog browsing), and 3 MCP Prompts for AI agents: CVE/KEV/CWE lookup, composite risk scoring (CVSS+EPSS+KEV+PoC fusion), CVSS v3.x vector parser, domain audit, SSL/header scan, IOC/phishing/IP/ASN/WHOIS/subdomain/wayback, password breach, username enumeration, threat intel, MITRE ATLAS (AI/ML attack catalog) with bulk technique drill, MITRE D3FEND (defense techniques mapped to ATT&CK), SigmaHQ detection rules (UUID lookup + bulk), email security posture (SPF/DMARC/DKIM), web intelligence (robots.txt parser, redirect-chain walker, email validation, brand-asset scraper, SEO audit, GEO / AI-visibility audit), full-site security scan (contrast_scan, A-F grade).","publisher":{"name":"ContrastCyber","url":"https://contrastcyber.com"},"homepage":"https://api.contrastcyber.com/quickstart","repository":null,"version":"1.36.2","license":null,"protocols":["a2a"],"tags":["security","cve","vulnerability","exploit","kev","cisa","cwe","weakness","osint","domain","dns","whois","ssl","headers","fingerprint","injection","secrets","dependencies","threat-intel","ioc","ip","asn","hash","phishing","password","email","phone","username","wayback","ai-ml","atlas","mitre","bulk","incident","d3fend","defense","attack","audit","prompt","triage"],"pricing":null,"endpoints":[{"url":"https://api.contrastcyber.com","type":"a2a","auth":"apikey,http","probeable":true}],"skills":[{"id":"cve_lookup","name":"CVE Lookup","tags":["security","cve","vulnerability"],"description":"Look up CVE details with CVSS, EPSS, KEV, patch info"},{"id":"cve_search","name":"CVE Search","tags":["security","cve"],"description":"Search CVEs by vendor, product, keyword"},{"id":"cve_leading","name":"Leading CVEs","tags":["security","cve"],"description":"Top trending/high-severity CVEs"},{"id":"bulk_cve_lookup","name":"Bulk CVE Lookup","tags":["security","cve"],"description":"Batch CVE details"},{"id":"exploit_lookup","name":"Exploit Lookup","tags":["security","exploit"],"description":"Public exploits for a CVE"},{"id":"kev_detail","name":"KEV Detail","tags":["security","cve","kev","cisa"],"description":"CISA KEV record: federal patch deadline, required action, ransomware association, CWE list"},{"id":"cwe_lookup","name":"CWE Lookup","tags":["security","cwe","weakness"],"description":"MITRE CWE catalog: description, mitigations, parent/child weakness chain, CVE count"},{"id":"audit_domain","name":"Domain Audit","tags":["osint","domain"],"description":"Full-stack domain security audit"},{"id":"domain_report","name":"Domain Report","tags":["osint","domain"],"description":"Summary report for a domain"},{"id":"subdomain_enum","name":"Subdomain Enumeration","tags":["osint","domain"],"description":"Enumerate subdomains via crt.sh"},{"id":"dns_lookup","name":"DNS Lookup","tags":["osint","dns"],"description":"DNS records (A, AAAA, MX, TXT, NS)"},{"id":"whois_lookup","name":"WHOIS Lookup","tags":["osint","whois"],"description":"Domain registration info"},{"id":"ssl_check","name":"SSL/TLS Check","tags":["security","ssl"],"description":"Certificate validation + grading (A-F)"},{"id":"check_headers","name":"Security Headers","tags":["security","headers"],"description":"HTTP security header validation with value checks"},{"id":"scan_headers","name":"Scan Headers","tags":["security","headers"],"description":"Bulk header scan"},{"id":"tech_fingerprint","name":"Tech Fingerprint","tags":["osint","fingerprint"],"description":"Detect CMS, frameworks, servers, JS libraries"},{"id":"check_injection","name":"Injection Check","tags":["security","injection"],"description":"Basic SQLi/XSS reflection test"},{"id":"check_secrets","name":"Secret Leakage Check","tags":["security","secrets"],"description":"Scan for exposed secrets in responses"},{"id":"check_dependencies","name":"Dependency Check","tags":["security","dependencies"],"description":"Vulnerable JS library detection"},{"id":"ioc_lookup","name":"IOC Lookup","tags":["threat-intel","ioc"],"description":"Indicator of compromise check (IP, domain, hash)"},{"id":"bulk_ioc_lookup","name":"Bulk IOC Lookup","tags":["threat-intel","ioc"],"description":"Batch IOC check"},{"id":"ip_lookup","name":"IP Lookup","tags":["osint","ip"],"description":"IP geolocation, ASN, reputation"},{"id":"asn_lookup","name":"ASN Lookup","tags":["osint","asn"],"description":"Autonomous system info"},{"id":"hash_lookup","name":"Hash Lookup","tags":["threat-intel","hash"],"description":"File hash reputation (MD5/SHA1/SHA256)"},{"id":"threat_intel","name":"Threat Intel","tags":["threat-intel"],"description":"Multi-source threat lookup"},{"id":"threat_report","name":"Threat Report","tags":["threat-intel"],"description":"Consolidated threat report"},{"id":"phishing_check","name":"Phishing Check","tags":["security","phishing"],"description":"Phishing URL detection"},{"id":"password_check","name":"Password Breach","tags":["security","password"],"description":"HIBP password breach check (k-anonymity)"},{"id":"email_disposable","name":"Disposable Email","tags":["osint","email"],"description":"Detect disposable / temp email domains"},{"id":"email_mx","name":"Email MX","tags":["osint","email"],"description":"Email domain MX record validation"},{"id":"phone_lookup","name":"Phone Lookup","tags":["osint","phone"],"description":"Phone carrier, region, country"},{"id":"username_lookup","name":"Username Lookup","tags":["osint","username"],"description":"Cross-platform username enumeration"},{"id":"wayback_lookup","name":"Wayback Lookup","tags":["osint","wayback"],"description":"Internet Archive snapshots for a URL"},{"id":"atlas_technique_lookup","name":"ATLAS Technique Lookup","tags":["security","ai-ml","atlas","mitre"],"description":"MITRE ATLAS (AI/ML attack catalog) technique lookup by id (AML.T####). Returns tactics, maturity, ATT&CK bridge, pivot hints"},{"id":"atlas_technique_search","name":"ATLAS Technique Search","tags":["security","ai-ml","atlas","mitre"],"description":"Search the MITRE ATLAS AI/ML attack catalog by keyword, tactic, or maturity"},{"id":"bulk_atlas_technique_lookup","name":"Bulk ATLAS Technique Lookup","tags":["security","ai-ml","atlas","mitre","bulk"],"description":"Drill into up to 50 MITRE ATLAS technique ids in a single call — natural follow-up to atlas_case_study_lookup's techniques_used array"},{"id":"atlas_case_study_lookup","name":"ATLAS Case Study Lookup","tags":["security","ai-ml","atlas","incident"],"description":"MITRE ATLAS real-world AI/ML attack incident case study (AML.CS####)"},{"id":"atlas_case_study_search","name":"ATLAS Case Study Search","tags":["security","ai-ml","atlas","incident"],"description":"Search ATLAS case studies by keyword or by referenced ATLAS technique"},{"id":"d3fend_defense_lookup","name":"D3FEND Defense Lookup","tags":["security","d3fend","defense","mitre"],"description":"MITRE D3FEND defense technique lookup by slug (e.g. TokenBinding). Returns tactic, artifact, mapped ATT&CK T-codes"},{"id":"d3fend_defense_search","name":"D3FEND Defense Search","tags":["security","d3fend","defense","mitre"],"description":"Search D3FEND defenses by keyword, tactic (Harden/Detect/Isolate/...), or targeted artifact"},{"id":"d3fend_defense_for_attack","name":"D3FEND Reverse Lookup","tags":["security","d3fend","defense","mitre","attack"],"description":"Given an ATT&CK T-code, return all D3FEND defenses that mitigate it. Bridges offensive intel (CVE/ATLAS/ATT&CK) to defensive playbook"},{"id":"d3fend_attack_coverage","name":"D3FEND Coverage Audit","tags":["security","d3fend","defense","mitre","audit"],"description":"Batch defense coverage breakdown across multiple ATT&CK T-codes — count defenses per tactic + identify undefended techniques"},{"id":"contrast_triage","name":"Contrast Triage (Prompt)","tags":["security","prompt","triage","workflow"],"description":"v1.23.0 conditional MCP Prompt: pick a tool chain by perspective ('red' = offensive recon, 'blue' = defensive triage) for an auto-detected target (CVE / ATLAS / ATT&CK / CWE / hash / IP / domain)."},{"id":"atlas_resources","name":"ATLAS Catalog (MCP Resources)","tags":["security","ai-ml","atlas","mitre","resource"],"description":"v1.23.0 MCP Resources: browse the full MITRE ATLAS catalog (167 techniques + 57 case studies) without spending a tool slot. URIs: atlas://catalog, atlas://technique/{id}, atlas://case-study/{id}."},{"id":"d3fend_resources","name":"D3FEND Catalog (MCP Resources)","tags":["security","d3fend","defense","mitre","resource"],"description":"v1.23.0 MCP Resources: browse the full MITRE D3FEND defense catalog (149 defenses). URIs: d3fend://catalog, d3fend://defense/{id}."},{"id":"cwe_resources","name":"CWE Catalog (MCP Resources)","tags":["security","cwe","mitre","resource"],"description":"v1.23.0 MCP Resources: browse the full MITRE CWE catalog (944 weaknesses). URIs: cwe://catalog (slim), cwe://weakness/{id} (full record)."},{"id":"robots_txt","name":"Robots.txt Parser","tags":["osint","web-intel","robots","crawler"],"description":"v1.25.0 Fetch + parse a target domain's robots.txt — sitemaps, per-User-agent allow/disallow, crawl-delay, Host directive (RFC 9309). Use BEFORE crawling/scraping a target site to honour its published rules."},{"id":"redirect_chain","name":"Redirect Chain Walker","tags":["osint","web-intel","redirect","phishing"],"description":"v1.25.0 Walk a URL's HTTP redirect chain hop-by-hop, returning per-hop status, Location, latency. SSRF-guarded at every hop. Use to deobfuscate URL shorteners, audit suspicious phishing links, trace marketing tracking redirects."},{"id":"email_verify","name":"Email Verify (Combined)","tags":["osint","email","validation","lead-gen"],"description":"v1.25.0 One-call email validation combining syntax + MX records + disposable check + role-address detection (admin@/info@/noreply@) + free-provider classification (gmail/outlook/yahoo). Replaces 2-3 tool calls. NO SMTP RCPT TO probing — ethical floor declared."},{"id":"brand_assets","name":"Brand Assets Scraper","tags":["osint","web-intel","branding","crm"],"description":"v1.25.0 Scrape a domain's homepage <head> for public brand assets — favicon, og:image, theme-color, og:site_name, JSON-LD Organization.logo. Enriches CRM records / company-card UIs without manual screenshots. Honours robots.txt, Cache-Control, per-target throttle."}],"tools":["CVE Lookup","CVE Search","Leading CVEs","Bulk CVE Lookup","Exploit Lookup","KEV Detail","CWE Lookup","Domain Audit","Domain Report","Subdomain Enumeration","DNS Lookup","WHOIS Lookup","SSL/TLS Check","Security Headers","Scan Headers","Tech Fingerprint","Injection Check","Secret Leakage Check","Dependency Check","IOC Lookup","Bulk IOC Lookup","IP Lookup","ASN Lookup","Hash Lookup","Threat Intel","Threat Report","Phishing Check","Password Breach","Disposable Email","Email MX","Phone Lookup","Username Lookup","Wayback Lookup","ATLAS Technique Lookup","ATLAS Technique Search","Bulk ATLAS Technique Lookup","ATLAS Case Study Lookup","ATLAS Case Study Search","D3FEND Defense Lookup","D3FEND Defense Search","D3FEND Reverse Lookup","D3FEND Coverage Audit","Contrast Triage (Prompt)","ATLAS Catalog (MCP Resources)","D3FEND Catalog (MCP Resources)","CWE Catalog (MCP Resources)","Robots.txt Parser","Redirect Chain Walker","Email Verify (Combined)","Brand Assets Scraper","SEO Audit (One-Page)","Contrast Scan (Full-Site)"],"extra":{"inputModes":["text","application/json"],"outputModes":["application/json"],"capabilities":{"streaming":true,"pushNotifications":false,"stateTransitionHistory":false},"protocolVersion":"0.3"},"attribution":{"kind":"a2a_card","name":"a2a_card","summary":"a2a_card","version":"a2a_card","description":"a2a_card","homepageUrl":"a2a_card","publisherUrl":"a2a_card","publisherName":"a2a_card"}},"derived":{"capabilities":[{"slug":"code.security-review","name":"Security Review","confidence":1,"provenance":"declared"},{"slug":"productivity.email","name":"Email","confidence":1,"provenance":"declared"},{"slug":"communication.sms-voice","name":"SMS & Voice","confidence":1,"provenance":"declared"},{"slug":"ai.prompting","name":"Prompt Management","confidence":1,"provenance":"declared"},{"slug":"security.secrets","name":"Secrets Management","confidence":1,"provenance":"declared"},{"slug":"dev.package-management","name":"Packages & Dependencies","confidence":1,"provenance":"declared"},{"slug":"data.web-scraping","name":"Web Scraping","confidence":0.911,"provenance":"derived"},{"slug":"commerce.ecommerce","name":"E-commerce Operations","confidence":0.911,"provenance":"derived"},{"slug":"documents.ocr","name":"OCR","confidence":0.833,"provenance":"derived"},{"slug":"content.seo","name":"SEO","confidence":0.807,"provenance":"derived"}],"categories":["ai","code","commerce","communication","content","data","dev","documents","productivity","security"]},"observed":{"status":"live","statusReason":"Responded 2h ago.","lastOkAt":"2026-09-05T20:25:45.900Z","lastProbedAt":"2026-09-05T20:25:45.900Z","statusComputedAt":"2026-09-05T20:26:17.230Z","reliability30d":{"probes":1,"successRate":1,"p50Ms":86},"latestObservations":[{"at":"2026-09-05T20:25:45.900Z","kind":"a2a_card","ok":true,"httpStatus":200,"latencyMs":86,"error":null,"detail":{"name":"ContrastAPI","signed":false,"version":"1.36.2","cardPath":"/.well-known/agent-card.json","skillCount":52,"protocolVersion":"0.3"}}],"tools":null,"package":null},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"a2a_card","key":"https://api.contrastcyber.com/.well-known/agent-card.json","url":"https://api.contrastcyber.com/.well-known/agent-card.json","firstSeenAt":"2026-09-05T17:22:18.429Z","fetchedAt":"2026-09-05T17:22:18.429Z","normalizedAt":"2026-09-05T17:22:18.429Z"}]},"firstSeenAt":"2026-09-05T17:22:18.429Z","updatedAt":"2026-09-05T17:26:12.835Z"}