# ContrastAPI (com.contrastcyber/api): tool descriptions scored

- tools/list taken: 2026-11-02 (UTC)
- From: [Official MCP Registry](https://registry.modelcontextprotocol.io/v0/servers/com.contrastcyber%2Fapi/versions/latest)
- Connected to: https://api.contrastcyber.com/mcp/
- Homepage: https://api.contrastcyber.com/
- Repository: https://github.com/UPinar/contrastapi
- Scoring rules: v2
- Tools: 55
- Average: 78.8 / 100 (Clear)
- Near-identical pairs: 0

This page shows how ContrastAPI (com.contrastcyber/api)'s tool descriptions scored, the issues found and the names of its tools and parameters. The descriptions are the server's own: read them where the copy came from.

Forecall asked the URL this server lists in the official MCP Registry for its tools/list once, on the date above, without calling any tool. The server may have changed since.

## Across the server

- Major: 55 tools. Above 40, models choose less accurately.
- Minor: The server has no instructions. Say there, once, what the server is for and when to use it: Claude Code and Gemini CLI read the instructions before the tool descriptions.

## Tools

- `email_security_posture`: 63 / 100
- `asn_lookup`: 67 / 100
- `email_verify`: 67 / 100
  - Major: Says nothing about when to use it, or when not to.
- `tech_fingerprint`: 67 / 100
- `contrast_scan`: 70 / 100
- `email_disposable`: 70 / 100
- `hash_lookup`: 70 / 100
- `tech_stack_cve_audit`: 70 / 100
  - Major: Says nothing about when to use it, or when not to.
- `threat_intel`: 70 / 100
- `username_lookup`: 70 / 100
- `whois_lookup`: 70 / 100
- `calculate_risk_score`: 72 / 100
- `check_injection`: 72 / 100
- `ssl_check`: 72 / 100
- `bulk_ioc_lookup`: 75 / 100
- `d3fend_attack_coverage`: 75 / 100
  - Minor: Required identifiers whose description does not say where the value comes from: attack_technique_ids. Name the tool or the place that returns it, or models look it up first.
- `domain_report`: 75 / 100
- `get_cvss_details`: 75 / 100
- `ioc_lookup`: 75 / 100
- `redirect_chain`: 75 / 100
- `atlas_case_study_search`: 77 / 100
  - Minor: No `required` list, so every argument is optional.
- `check_secrets`: 77 / 100
- `d3fend_defense_lookup`: 77 / 100
  - Minor: Required identifiers whose description does not say where the value comes from: defense_id. Name the tool or the place that returns it, or models look it up first.
- `kev_detail`: 77 / 100
- `scan_headers`: 77 / 100
- `password_check`: 78 / 100
- `robots_txt`: 78 / 100
- `threat_report`: 78 / 100
- `atlas_case_study_lookup`: 79 / 100
- `check_headers`: 80 / 100
- `dns_lookup`: 80 / 100
- `email_mx`: 80 / 100
- `seo_audit`: 80 / 100
- `atlas_technique_lookup`: 82 / 100
- `atlas_technique_search`: 82 / 100
  - Minor: No `required` list, so every argument is optional.
- `cve_search`: 82 / 100
  - Minor: No `required` list, so every argument is optional.
- `cwe_lookup`: 82 / 100
  - Minor: The description says the tool is deprecated. Name the replacement, and consider taking the tool out of tools/list: models avoid it when asked for what it does.
  - Minor: Required identifiers whose description does not say where the value comes from: cwe_id. Name the tool or the place that returns it, or models look it up first.
- `exploit_lookup`: 83 / 100
  - Minor: Required identifiers whose description does not say where the value comes from: cve_id. Name the tool or the place that returns it, or models look it up first.
- `audit_domain`: 85 / 100
- `bulk_atlas_technique_lookup`: 85 / 100
  - Minor: Required identifiers whose description does not say where the value comes from: technique_ids. Name the tool or the place that returns it, or models look it up first.
- `cve_lookup`: 85 / 100
- `geo_audit`: 85 / 100
- `ip_lookup`: 85 / 100
- `phishing_check`: 85 / 100
- `phone_lookup`: 85 / 100
- `sigma_rule_lookup`: 85 / 100
  - Minor: The description says the tool is deprecated. Name the replacement, and consider taking the tool out of tools/list: models avoid it when asked for what it does.
- `subdomain_enum`: 85 / 100
- `cve_leading`: 87 / 100
  - Minor: No `required` list, so every argument is optional.
- `d3fend_defense_search`: 87 / 100
  - Minor: No `required` list, so every argument is optional.
- `brand_assets`: 88 / 100
- `wayback_lookup`: 88 / 100
- `bulk_cve_lookup`: 90 / 100
- `d3fend_defense_for_attack`: 91 / 100
  - Minor: Required identifiers whose description does not say where the value comes from: attack_technique_id. Name the tool or the place that returns it, or models look it up first.
- `bulk_sigma_rule_lookup`: 93 / 100
  - Minor: Required identifiers whose description does not say where the value comes from: rule_ids. Name the tool or the place that returns it, or models look it up first.
- `check_dependencies`: 95 / 100

Is your server listed here and you would rather it were not? Email support@forecall.dev, and we will take it off within 7 days.

[All scored servers](https://forecall.dev/en/servers)