{% include "nav.html" %}

Simple Pricing

Security intelligence API — free for individuals, $15/mo for teams that need higher limits.

Free

$0 /forever

For developers, researchers, indie hackers, and AI agents.

  • {{ free_limit }} API requests / hour per IP
  • All {{ endpoint_count }} endpoints (CVE, EPSS, KEV, ATLAS, D3FEND, CWE, domain, IOC, OSINT, web-intel)
  • All {{ tool_count }} MCP tools + {{ resource_count }} MCP Resources + {{ prompt_count }} MCP Prompts
  • No signup, no API key, no credit card
  • JSON responses, public source code (MIT)
Start Calling — Free

FAQ

Is the Free tier really free?
Yes. No credit card, no signup, no trial period. {{ free_limit }} requests/hour per IP, forever. Every endpoint and every MCP tool is available — Pro just raises the rate limit and unlocks Pro-only enrichment fields (Shodan, AbuseIPDB).
What's actually behind the API?
{{ endpoint_count }} REST endpoints covering CVE/EPSS/KEV lookup, composite risk scoring (CVSS+EPSS+KEV+PoC fusion), CVSS v3.x vector parsing, MITRE CWE / ATLAS / D3FEND catalog browsing, domain reconnaissance (DNS, WHOIS, SSL, subdomains, CT logs), IOC and threat intelligence (URLhaus, AbuseIPDB, Shodan, FireHOL, Tor exit list), code security analysis (secrets, injection, headers), and web intelligence (robots.txt parsing, redirect-chain walking, email validation, brand asset scraping, SEO audit). All exposed as {{ tool_count }} MCP tools for AI agents (Claude, Cursor, Copilot, etc.).
How do I use this with Claude / Cursor / an MCP client?
See the MCP setup guide. One-line config, streamable-http transport, no key required for the Free tier.
How do I get my Pro API key after purchase?
After checkout (card or crypto), you'll be redirected to a welcome page that polls and shows your key once the payment processor confirms. Save it immediately — for security, the raw key is shown only once.
Can I pay with crypto?
Yes. Click "Pay with Crypto" and pick any coin on the NOWPayments page (BTC, USDT, ETH, TRX, and more). Same $15/mo. The Pro key is valid for 30 days from payment confirmation; pay again to renew. Useful when card payments are restricted in your region.
Can I cancel anytime?
Card subscriptions: cancel through the Lemon Squeezy customer portal — your key stays active until the billing period ends. Crypto: each payment is a one-time invoice for 30 days, so there's nothing to cancel; you simply stop paying to renew.
Is there an SLA?
The API targets 99.9% uptime. Real-time health is reported at /v1/status. Pro users get priority email support. No formal SLA at this stage.
Is it open source?
Yes — MIT licensed. Source at github.com/UPinar/contrastapi.