Subdomain Finder
SubdomainFinderSubdomain Finder: Subdomain Finder discovers active subdomains and their resolved IP addresses for any target domain. It checks certificate transparency logs and common hostnames, returning matched hostnames, root A records, and scan completion status. (Cost: 100 credits)
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"domain": "<domain>"
},
"name": "SubdomainFinder"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Limit the number of subdomains to detect | |
| domain | Yes | The domain you want to find all the available subdomains for (e.g. google.com) | |
| deepScan | No | Search the full wordlist instead of only certificate transparency and common names. Slower, and may still report complete: false when the time limit is reached |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| data | No | ||
| error | No | Error message, null on success | |
| status | No | "ok" on success |