How to Use the Contrast Security MCP in OpenAI Agents SDK

Q: Can I block deployments in OpenAI Agents SDK if Contrast Security finds a bug?

Yes. You write a guardrail that triggers listcriticalvulnerabilities before your agent executes a deployment action. If the tool returns a non-empty list, the agent throws an exception to halt your process.

Plug Contrast Security into your OpenAI Agents SDK production pipeline to catch critical vulnerabilities before you deploy code.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect Contrast Security MCP to OpenAI Agents SDK

Create your Vinkius account to connect Contrast Security to OpenAI Agents SDK and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup Contrast Security with OpenAI Agents SDK

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Monitor your app security with OpenAI Agents SDK

Feed your agent real-time vulnerability data by calling `list_critical_vulnerabilities` directly from your Python runtime. You define the guardrails in your agent code, and the tool provides the raw security traces needed to validate your build status. Your agent automatically handles the logic for fetching trace data via `get_vulnerability_details`. It checks the severity levels and stops the CI/CD pipeline if the agent detects a high-risk security flaw in your application layer.

Manage Contrast Security assets via OpenAI Agents SDK

Query your entire infrastructure setup using `list_monitored_servers` to see exactly which machines are running the agent. You get a clear view of your coverage without leaving your script environment. Searching for specific applications happens instantly with `search_applications_by_name`. Your agent maps these results to your internal service registry, ensuring every deployment is accounted for in your security dashboard.

Automate security audits using OpenAI Agents SDK

Run custom audits by using `search_vulnerabilities` to filter traces based on your specific risk criteria. Your agent processes these results in memory, allowing for automated triage that ignores noise and focuses on real threats. Pulling organization metadata is handled by `get_organization_info`. This keeps your agent synced with your current Contrast account settings, so you never waste time chasing outdated vulnerability data.

Setup guide

Set up Contrast Security MCP in OpenAI Agents SDK

Prerequisites

Python 3.10+ installed
openai-agents package (pip install openai-agents)
Active Vinkius subscription with a valid endpoint token

1

Install the SDK

Run pip install openai-agents to install the OpenAI Agents SDK. The MCP integration is built-in — no extra dependencies needed.
2

Connect via SSE transport

Use MCPServerSse with your Vinkius endpoint URL. Replace [YOUR_TOKEN_HERE] with your token from cloud.vinkius.com. The SDK auto-discovers all Contrast Security tools at runtime.
3

Create your Agent

Pass the MCP to Agent(mcp_servers=[server]). The agent receives Contrast Security tools as native definitions — JSON schemas resolve automatically.
4

Run the agent

Call Runner.run(agent, prompt) to execute. The agent invokes the appropriate Contrast Security tools and returns structured results. Copy the full example on the right to get started.

agent.py

import asyncio
from agents import Agent, Runner
from agents.mcp import MCPServerSse

async def main():
    async with MCPServerSse(
        url="https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    ) as server:
        agent = Agent(
            name="Contrast Security Agent",
            instructions="You have access to Contrast Security tools.",
            mcp_servers=[server],
        )
        result = await Runner.run(agent, "List recent transactions")
        print(result.final_output)

asyncio.run(main())

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by Contrast Security. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect Contrast Security now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about Contrast Security MCP in OpenAI Agents SDK

You instantiate the MCP server object and pass it to your agent constructor. The agent automatically discovers tools like `list_vulnerability_traces` to pull data directly into your execution flow.

Yes. You write a guardrail that triggers `list_critical_vulnerabilities` before your agent executes a deployment action. If the tool returns a non-empty list, the agent throws an exception to halt your process.

Vinkius handles the connection using an ephemeral sandbox. Your agent only sees the vulnerability traces and application metadata you explicitly request via the tool calls.

You provide a single endpoint token to the Vinkius-hosted server. The server manages the session with your Contrast instance so you don't have to deal with API keys in your Python code.

The server abstracts the API changes behind consistent tool names. Your agent code remains stable while the underlying MCP server handles the mapping to the actual security data.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript