How to Use the Contrast Security MCP in CrewAI

Q: How do I configure the Contrast Security MCP Server inside CrewAI?

Install the framework using pip install crewai "crewaitools". You can then pass the Vinkius URL directly into your Agent's mcps array. For advanced setups, use MCPServerHTTP to filter which tools your agents can access.

Q: Where does the Contrast Security data go when processed by CrewAI?

Data retrieved from tools like getorganizationinfo remains within your local CrewAI runtime memory. It is only passed to your selected LLM provider during active analysis. Vinkius secures the credentials and ensures all tool calls run in an isolated environment.

Deploy a crew of specialized AI agents to monitor Contrast Security and patch vulnerabilities autonomously inside CrewAI.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect Contrast Security MCP to CrewAI

Create your Vinkius account to connect Contrast Security to CrewAI and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup Contrast Security with CrewAI

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Run an autonomous security operations center with CrewAI

Assign specialized roles to your security agents. One agent can monitor threats using `list_vulnerability_traces`, while a second analyst agent calls `get_vulnerability_details` to dissect the exploit path. They pass findings back and forth using CrewAI's shared memory. This collaborative approach removes the bottleneck of manual triage. The moderator agent can immediately pinpoint the exact line of code responsible for the vulnerability. Your team receives clean, actionable remediation instructions without lifting a finger.

Audit your software inventory using this MCP Server

Let your CrewAI agents map your entire attack surface. The researcher agent uses `list_applications` to discover all monitored codebases in your Contrast account. It then uses `search_applications_by_name` to isolate legacy systems that need immediate attention. Once identified, the agent queries `get_organization_info` to check if these legacy apps comply with your corporate security policies. The crew compiles a markdown report detailing every non-compliant system in minutes.

Automate critical threat responses inside CrewAI

Build a rapid response crew that activates the moment a critical bug is found. This CrewAI MCP configuration runs `list_critical_vulnerabilities` to find severe flaws. The escalation agent gathers server context using `list_monitored_servers` to see if the vulnerability is live in production. It drafts a high-priority Slack alert with all the technical details needed to patch the server immediately.

Setup guide

Set up Contrast Security MCP in CrewAI

Prerequisites

Python 3.10+ installed
crewai package (pip install crewai)
Active Vinkius subscription with a valid endpoint token

1

Install CrewAI
Run pip install crewai to install the framework. MCP support is built-in via the mcps parameter.
2

Add the MCP URL to your agent
Pass your Vinkius endpoint directly to the mcps list. Replace [YOUR_TOKEN_HERE] with your token from cloud.vinkius.com. CrewAI handles tool discovery and caching automatically.
3

Kick off your crew
Create a Crew with your agent and tasks. Call crew.kickoff() — the agent will automatically invoke Contrast Security tools as needed.

crew.py

from crewai import Agent, Task, Crew

agent = Agent(
    role="Contrast Security Analyst",
    goal="Access and analyze Contrast Security data via MCP.",
    backstory="Expert analyst with direct Contrast Security access.",
    mcps=[
        "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    ],
)

task = Task(
    description="List recent Contrast Security transactions",
    agent=agent,
    expected_output="A summary of recent activity",
)

crew = Crew(agents=[agent], tasks=[task])
result = crew.kickoff()
print(result)

Get your connection token →

Prerequisites

Python 3.10+ installed
crewai + crewai-tools packages
Active Vinkius subscription with a valid endpoint token

1

Install dependencies
Run pip install crewai crewai-tools. The MCPServerAdapter handles lifecycle management and tool conversion.
2

Connect with MCPServerAdapter
Use MCPServerAdapter as a context manager with SseServerParameters pointing to your Vinkius endpoint. The adapter automatically manages connection lifecycle.
3

Assign tools and run
Pass the returned mcp_tools to your agent's tools parameter. The adapter converts MCP tools to native BaseTool objects compatible with all CrewAI agents.

crew.py

from crewai import Agent, Task, Crew
from crewai_tools import MCPServerAdapter
from mcp import SseServerParameters

server_params = SseServerParameters(
    url="https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
)

with MCPServerAdapter(server_params) as mcp_tools:
    agent = Agent(
        role="Contrast Security Analyst",
        goal="Access and analyze Contrast Security data via MCP.",
        backstory="Expert analyst with direct Contrast Security access.",
        tools=mcp_tools,
    )

    task = Task(
        description="List recent Contrast Security transactions",
        agent=agent,
        expected_output="A summary of recent activity",
    )

    crew = Crew(agents=[agent], tasks=[task])
    result = crew.kickoff()
    print(result)

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by Contrast Security. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect Contrast Security now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about Contrast Security MCP in CrewAI

Install the framework using `pip install crewai "crewai[tools]"`. You can then pass the Vinkius URL directly into your Agent's `mcps` array. For advanced setups, use `MCPServerHTTP` to filter which tools your agents can access.

Yes, CrewAI is built for collaborative agent teams. A monitoring agent can find a bug via `search_vulnerabilities` and pass the context to a developer agent to draft a code fix.

You can restrict tool access using CrewAI's tool filters so agents don't call heavy tools repeatedly. This keeps your LLM token usage low while still allowing agents to fetch crucial data via `get_vulnerability_details`.

The framework supports stdio, SSE, and Streamable HTTP transports. When running on Vinkius, you will typically use the secure HTTP endpoint to connect your agents to the Contrast API.

Data retrieved from tools like `get_organization_info` remains within your local CrewAI runtime memory. It is only passed to your selected LLM provider during active analysis. Vinkius secures the credentials and ensures all tool calls run in an isolated environment.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript