Skip to content

UPinar/contrastapi

v1.35.0 Breaking

This release includes 1 breaking change for platform teams planning a safe upgrade.

Published 23d MCP Security & Auth
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai-agents ai-security api claude claude-desktop-extension cve
+13 more
security domain-recon email-security llm-tools mcp mcpb mitre-atlas mitre-d3fend model-context-protocol osint sigma-rules threat-intelligence vulnerability-management

Summary

AI summary

Terminology change: credit renamed to token and rate‑limit field updated.

Full changelog

🆕 geo_auditGET /v1/geo/{domain} (MCP tool #55)

Deterministic GEO / AI-visibility readiness score (0–100) — "can AI assistants (ChatGPT, Claude, Perplexity, Google AI) discover, crawl, and recommend this site?" using structural signals only — no LLM is queried. 7 weighted rules: llms.txt (15), AI-crawler robots.txt access (25), schema.org @type coverage (20), SSR vs client-only SPA (15), OG/canonical/sitemap (10), semantic headings (10), comparison content (5). Same ethical floor as seo_audit: robots.txt honoured (Disallow: / → 403), per-target throttle, SSRF-guarded homepage + robots + llms.txt fetch.

🔤 Terminology: "credit" → "token"

Rate-limit vocabulary unified. Wire-facing: /v1/capabilities now emits token_cost (was credit_cost); response shapes otherwise unchanged.

💲 Pricing correction

seo_audit / brand_assets documented cost aligned 2 → 1 to match the actual gate charge (both always charged 1; docs said 2).

📚 Docs

Consolidated ENDPOINTS.md / PROMPTS.md / RATE_LIMITS.md / resources.md / tool-selection-guide.mdAPI_Documentation.md + MCP_Documentation.md; fixed broken TOC anchors.

📊 Counts

MCP tools 54 → 55 · Resources 7 · Prompts 3 · Tests 2636 → 2637 passing · pip-audit clean · ruff clean

Breaking Changes

  • /v1/capabilities response field credit_cost renamed to token_cost

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track UPinar/contrastapi

Get notified when new releases ship.

Sign up free

About UPinar/contrastapi

Security intelligence API with 31 MCP tools for CVE/EPSS/KEV lookup, domain recon (DNS/WHOIS/SSL/subdomains/CT logs), IOC/threat intel, OSINT (email/phone/username), and code security scanning (secrets, injection). Free 100 req/hr.

All releases →

Related context

Earlier breaking changes

  • v1.33.11 `bulk_sigma_rule_lookup` now costs 1 credit per `rule_id`, changing from flat 1 credit/call.

Beta — feedback welcome: [email protected]