Find known subdomains of a domain. Passive data; may include historic entries. List or count.
Connect Remote server
claude mcp add --transport http subdomains https://api.subdomain.app/mcp
{
"mcpServers": {
"subdomains": {
"url": "https://api.subdomain.app/mcp"
}
}
}
{
"servers": {
"subdomains": {
"type": "http",
"url": "https://api.subdomain.app/mcp"
}
}
}
Settings > Connectors > Add custom connector
URL: https://api.subdomain.app/mcp
Tools 2 found in our last check
find_subdomainsList known subdomains (hostnames) of a root domain. Data is passive (not active scanning): results are historic observations and may include subdomains that no longer resolve or are no longer live. Results are a point-in-time snapshot that changes over time as new subdomains are…
count_subdomainsReturn only the total number of distinct subdomains known for a domain — no list. Cheap and low-token. Use when the user asks "how many subdomains" or you only need the size of the attack surface. Count includes historic subdomains that may no longer be live. It is a point-in-ti…
Details
| Endpoint | https://api.subdomain.app/mcp (Streamable HTTP) |
| First published | 26 Jun 2026 |
| Last updated | 26 Jun 2026 |
| Registry name | app.subdomain/subdomains |
More other servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
