UPinar/contrastapi

v1.34.0 Feature

This release adds 2 notable features for engineering teams evaluating rollout.

Published 1mo MCP Security & Auth

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai-agents ai-security api claude claude-desktop-extension cve

+13 more

security domain-recon email-security llm-tools mcp mcpb mitre-atlas mitre-d3fend model-context-protocol osint sigma-rules threat-intelligence vulnerability-management

Summary

AI summary

First call to each distinct MCP tool is free for keyless callers, allowing discovery without hitting rate limits.

Changes in this release

Type	Severity	Summary	CVE
Feature	Medium	First call to each distinct tool is free for keyless callers in MCP `tools/call`. First call to each distinct tool is free for keyless callers in MCP `tools/call`. Source: llm_adapter@2026-06-06 Confidence: high	—
Performance	Medium	Initial discovery sweep no longer hits hourly rate limit for keyless callers. Initial discovery sweep no longer hits hourly rate limit for keyless callers. Source: granite4.1:30b@2026-06-06-audit Confidence: low	—

Full changelog

What's new

New MCP agents commonly probe every tool once to discover what's available — that initial sweep could previously hit the hourly limit partway through. Now the first call to each distinct tool is free for keyless (Free-tier) callers: a one-time grant per caller, so an agent can complete its discovery pass without being rate-limited. Later calls fall back to the normal hourly limit.

Scope

MCP tools/call only — REST endpoints and API-key (Pro) callers are unchanged.
Single-credit tools only; composite/orchestration tools keep their cost.
One-time per caller.

Notes

No contract changes — MCP tools (53), Resources (7), Prompts (3) and all schemas unchanged; existing integrations unaffected.
Schema: an internal ledger table created idempotently on startup — no migration step, no downtime.
Privacy/abuse: caller identity is hashed and bucketed; abuse-resistant by design.
Tests: full suite green with added first-swipe coverage (2510 passing).
Rollback: feature is flag-gated.

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track UPinar/contrastapi

Get notified when new releases ship.

About UPinar/contrastapi

Security intelligence API with 31 MCP tools for CVE/EPSS/KEV lookup, domain recon (DNS/WHOIS/SSL/subdomains/CT logs), IOC/threat intel, OSINT (email/phone/username), and code security scanning (secrets, injection). Free 100 req/hr.

All releases →

Related context

Related tools

Earlier breaking changes

v1.33.11 `bulk_sigma_rule_lookup` now costs 1 credit per `rule_id`, changing from flat 1 credit/call.