<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>Forem: UPinar</title>
    <description>The latest articles on Forem by UPinar (@contrastcyber).</description>
    <link>https://forem.com/contrastcyber</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3862120%2F7aa41086-bdcd-44b0-8dc3-c140f4f54e9e.png</url>
      <title>Forem: UPinar</title>
      <link>https://forem.com/contrastcyber</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://forem.com/feed/contrastcyber"/>
    <language>en</language>
    <item>
      <title>I Built 30 Security Tools That AI Agents Can Use</title>
      <dc:creator>UPinar</dc:creator>
      <pubDate>Mon, 06 Apr 2026 18:30:44 +0000</pubDate>
      <link>https://forem.com/contrastcyber/i-built-23-security-tools-that-ai-agents-can-use-4he7</link>
      <guid>https://forem.com/contrastcyber/i-built-23-security-tools-that-ai-agents-can-use-4he7</guid>
      <description>&lt;p&gt;I wanted a single interface where an AI agent could check domains, look up vulnerabilities, and query threat intel — all from one prompt.&lt;/p&gt;

&lt;p&gt;So I built 30 security tools as an MCP server. Any AI agent that speaks MCP can call them natively.&lt;/p&gt;




&lt;h2&gt;
  
  
  What Can You Do With It?
&lt;/h2&gt;

&lt;p&gt;Ask your AI agent things like:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;"Run a full security audit on example.com"&lt;/li&gt;
&lt;li&gt;"Does CVE-2024-3094 have public exploits?"&lt;/li&gt;
&lt;li&gt;"Is this URL a known phishing link?"&lt;/li&gt;
&lt;li&gt;"Scan this code for hardcoded secrets"&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;The agent picks the right tools, chains them, and gives you a summary. One prompt, no scripting.&lt;/p&gt;




&lt;h2&gt;
  
  
  Setup
&lt;/h2&gt;



&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight json"&gt;&lt;code&gt;&lt;span class="p"&gt;{&lt;/span&gt;&lt;span class="w"&gt;
  &lt;/span&gt;&lt;span class="nl"&gt;"mcpServers"&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="p"&gt;{&lt;/span&gt;&lt;span class="w"&gt;
    &lt;/span&gt;&lt;span class="nl"&gt;"contrast"&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="p"&gt;{&lt;/span&gt;&lt;span class="w"&gt;
      &lt;/span&gt;&lt;span class="nl"&gt;"command"&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="s2"&gt;"npx"&lt;/span&gt;&lt;span class="p"&gt;,&lt;/span&gt;&lt;span class="w"&gt;
      &lt;/span&gt;&lt;span class="nl"&gt;"args"&lt;/span&gt;&lt;span class="p"&gt;:&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="p"&gt;[&lt;/span&gt;&lt;span class="s2"&gt;"-y"&lt;/span&gt;&lt;span class="p"&gt;,&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="s2"&gt;"@anthropic-ai/mcp-remote"&lt;/span&gt;&lt;span class="p"&gt;,&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;&lt;span class="s2"&gt;"https://api.contrastcyber.com/mcp/"&lt;/span&gt;&lt;span class="p"&gt;]&lt;/span&gt;&lt;span class="w"&gt;
    &lt;/span&gt;&lt;span class="p"&gt;}&lt;/span&gt;&lt;span class="w"&gt;
  &lt;/span&gt;&lt;span class="p"&gt;}&lt;/span&gt;&lt;span class="w"&gt;
&lt;/span&gt;&lt;span class="p"&gt;}&lt;/span&gt;&lt;span class="w"&gt;
&lt;/span&gt;&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;No API key. No signup. &lt;strong&gt;100 requests/hour free.&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;Works with Claude Desktop, Cursor, VS Code, Windsurf, and more. Setup guides: &lt;a href="https://api.contrastcyber.com/mcp-setup" rel="noopener noreferrer"&gt;api.contrastcyber.com/mcp-setup&lt;/a&gt;&lt;/p&gt;




&lt;h2&gt;
  
  
  What I Learned
&lt;/h2&gt;

&lt;p&gt;&lt;strong&gt;No API key = fastest adoption.&lt;/strong&gt; Removed the key requirement, traffic jumped immediately.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;MCP users are stickier.&lt;/strong&gt; They chain tools naturally — one prompt can trigger 5-10 calls.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Get listed early.&lt;/strong&gt; &lt;a href="https://smithery.ai" rel="noopener noreferrer"&gt;Smithery&lt;/a&gt;, &lt;a href="https://mcp.so" rel="noopener noreferrer"&gt;mcp.so&lt;/a&gt;, &lt;a href="https://mcpservers.org" rel="noopener noreferrer"&gt;mcpservers.org&lt;/a&gt;, &lt;a href="https://marketplace.dify.ai/" rel="noopener noreferrer"&gt;Dify marketplace&lt;/a&gt; — these directories drive most discovery right now.&lt;/p&gt;




&lt;h2&gt;
  
  
  Try It
&lt;/h2&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;GitHub:&lt;/strong&gt; &lt;a href="https://github.com/UPinar/contrastapi" rel="noopener noreferrer"&gt;github.com/UPinar/contrastapi&lt;/a&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Full tool list:&lt;/strong&gt; &lt;a href="https://api.contrastcyber.com" rel="noopener noreferrer"&gt;api.contrastcyber.com&lt;/a&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Setup guide:&lt;/strong&gt; &lt;a href="https://api.contrastcyber.com/mcp-setup" rel="noopener noreferrer"&gt;api.contrastcyber.com/mcp-setup&lt;/a&gt;
&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Free. Open source. No API key.&lt;/p&gt;

&lt;p&gt;If you find it useful, a star on GitHub helps more than you think.&lt;/p&gt;




&lt;p&gt;What security tools do you wish your AI agent could use? Always looking for what to build next.&lt;/p&gt;

</description>
      <category>security</category>
      <category>ai</category>
      <category>mcp</category>
      <category>opensource</category>
    </item>
  </channel>
</rss>
