This release includes breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+13 more
ReleasePort's take
Light signalv1.32.0 adds MCP tools and REST endpoints for email security posture auditing (SPF/DKIM/DMARC validation) and Sigma rule lookups, including bulk query support for up to 50 UUIDs.
Why it matters: Security and SRE teams can consolidate email audit and threat intelligence lookups into native tooling, reducing context switches in investigation workflows.
Summary
AI summaryThree new MCP tools and three REST endpoints add SPF/DKIM/DMARC audit, Sigma rule lookup, and bulk Sigma lookup.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Email security posture audit tool with SPF/DKIM/DMARC scoring Email security posture audit tool with SPF/DKIM/DMARC scoring Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Single Sigma rule lookup tool added with SigmaHQ integration Single Sigma rule lookup tool added with SigmaHQ integration Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Bulk Sigma rule lookup tool added for up to 50 UUIDs Bulk Sigma rule lookup tool added for up to 50 UUIDs Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
REST endpoint added for Sigma rule search by multiple parameters REST endpoint added for Sigma rule search by multiple parameters Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Feature | Medium |
New REST endpoint GET /v1/sigma/search enables multi‑parameter Sigma rule search New REST endpoint GET /v1/sigma/search enables multi‑parameter Sigma rule search Source: granite4.1:30b@2026-05-23-audit Confidence: low |
— |
| Feature | Low |
Added three new MCP tools: email_security_posture, sigma_rule_lookup, bulk_sigma_rule_lookup Added three new MCP tools: email_security_posture, sigma_rule_lookup, bulk_sigma_rule_lookup Source: granite4.1:30b@2026-05-23-audit Confidence: low |
— |
Full changelog
What's new
3 new MCP tools, 3 new REST endpoints.
| Tool | Description |
|---|---|
| email_security_posture | SPF / DKIM / DMARC posture audit — 0-100 score, A+/A/B/C/D/F grade, remediation findings |
| sigma_rule_lookup | Single Sigma rule lookup by UUID (SigmaHQ corpus, ~3,200 rules, daily sync) |
| bulk_sigma_rule_lookup | Bulk Sigma rule lookup (up to 50 UUIDs per call) |
REST-only surface: GET /v1/sigma/search — multi-param search by ATT&CK technique, CVE, logsource, or freetext.
Counts
- MCP tools: 49 → 52
- HTTP endpoints: 57+ → 60+
- Tests: 2289 → 2374
Compatibility
Schema additive — no breaking changes. Existing tool args, response shapes, and HTTP status codes unchanged.
Attribution
Sigma detection rules are sourced from SigmaHQ under the Detection Rule License (DRL) 1.1. Author, references, and rule_id metadata preserved in every response.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About UPinar/contrastapi
Security intelligence API with 31 MCP tools for CVE/EPSS/KEV lookup, domain recon (DNS/WHOIS/SSL/subdomains/CT logs), IOC/threat intel, OSINT (email/phone/username), and code security scanning (secrets, injection). Free 100 req/hr.
Related context
Related tools
Earlier breaking changes
- v1.33.11 `bulk_sigma_rule_lookup` now costs 1 credit per `rule_id`, changing from flat 1 credit/call.
Beta — feedback welcome: [email protected]