contrastapi logo
contrastapi
★ 35
vs
jshookmcp logo
jshookmcp
★ 2.1k

contrastapi vs jshookmcp

contrastapi: ContrastAPI is a security intelligence API and MCP server that offers over 35 endpoints covering CVE lookup, domain reconnaissance, IP reputation, threat intelligence, code security scanning, and more. It is free to use with a rate limit of 100 requests per hour and requires no API key for the free tier. The tool is designed for AI agents and integrates seamlessly with platforms like Claude Desktop, Cursor, VS Code, and Windsurf.; jshookmcp: jshook is an MCP server that gives AI agents a front-end and binary reverse-engineering workspace: 735 tools across 36 domains for hooking pages, capturing network traffic, deobfuscating bundles, disassembling WASM and instrumenting processes. A search-first profile loads only about 3K tokens of tool metadata so agents are not flooded with schemas.

01

TL;DR

contrastapi logo
contrastapiSecurity & Safety · ★ 35

Perform a comprehensive security audit on a domain, including DNS, SSL, and threat intelligence

jshookmcp logo
jshookmcpSecurity & Safety · ★ 2.1k

Letting an agent analyse and deobfuscate a web app's JavaScript and network protocol

02

Side-by-Side Comparison

Field
contrastapi logocontrastapi
jshookmcp logojshookmcp
Category
Security & Safety
Security & Safety
Stars
★ 35
★ 2.1k
License
MIT
AGPL-3.0
Install Command
npm install contrastapi
npx -y @jshookmcp/jshook@latest
Updated
1d ago
3d ago
Open Source
Yes
Yes
Tags
ai-agents, api, cve
ai-agents, anti-detection, browser-automation
03

Features

contrastapi logocontrastapi
01One-call full domain report combining DNS, WHOIS, SSL, subdomains, WAF, and IP reputation
02CVE intelligence enriched with EPSS exploit probability and CISA KEV status
03IP reputation via AbuseIPDB and Shodan with 24-hour cache
04Technology fingerprinting for CMS, frameworks, CDN, and analytics
05Free forever with 100 req/hr, no API key required
jshookmcp logojshookmcp
01search, workflow and full tool profiles; search loads ~3K tokens, full exposes all 735 tools (~109K tokens)
02Chromium and Camoufox automation over CDP, with HTTP/2 frame building and an on-demand MITM proxy CA
03WASM reverse engineering via wabt (wasm2wat, wasm-decompile, wasm-objdump, wasm2c) and Binaryen
04Frida, Ghidra and IDA bridges, hardware breakpoints, PE introspection and memory read/write
05Android APK triage with apktool, jadx decompilation, DEX scanning and unidbg emulation
06Streamable HTTP sessions restore browser and domain state after reconnects
04

Use Cases

contrastapi logocontrastapi
↳Perform a comprehensive security audit on a domain, including DNS, SSL, and threat intelligence
↳Look up CVE details and check if they are actively exploited in the wild
↳Check the reputation of an IP address and enrich it with malware data
jshookmcp logojshookmcp
↳Letting an agent analyse and deobfuscate a web app's JavaScript and network protocol
↳WASM and native binary analysis with Ghidra/IDA/Frida driven from chat
↳Android APK static triage and decompilation for security research
FAQ

FAQ

What is the difference between contrastapi and jshookmcp?
Both contrastapi and jshookmcp are in the Security & Safety category. contrastapi has 35 stars, while jshookmcp has 2.1k stars.
Which is better, contrastapi or jshookmcp?
The best choice depends on your use case. Choose contrastapi if Perform a comprehensive security audit on a domain, including DNS, SSL, and threat intelligence, and jshookmcp if Letting an agent analyse and deobfuscate a web app's JavaScript and network protocol.
Is contrastapi free or open source?
Yes, contrastapi is open source on GitHub (MIT).
Is jshookmcp free or open source?
Yes, jshookmcp is open source on GitHub (AGPL-3.0).
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit
→

Related