Skip to main content
Glama
badchars

osint-mcp-server

by badchars

st_subdomains

Enumerate subdomains for a domain using SecurityTrails data to identify attack surfaces and perform reconnaissance in OSINT investigations.

Instructions

Enumerate subdomains for a domain via SecurityTrails. Returns FQDNs. Requires ST_API_KEY.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
domainYesDomain to enumerate subdomains for

Implementation Reference

  • The implementation of the st_subdomains tool handler which fetches subdomains from SecurityTrails API.
    export async function stSubdomains(domain: string, apiKey: string): Promise<StSubdomainsResult> {
      const data = await stFetch(`/domain/${encodeURIComponent(domain)}/subdomains`, apiKey);
      const subs: string[] = (data.subdomains ?? []).map((s: string) => `${s}.${domain}`);
      return { domain, subdomains: subs, total: subs.length };
    }
  • Registration of the st_subdomains tool in the MCP protocol tools definition.
    const stSubdomainsTool: ToolDef = {
      name: "st_subdomains",
      description: "Enumerate subdomains for a domain via SecurityTrails. Returns FQDNs. Requires ST_API_KEY.",
      schema: {
        domain: z.string().describe("Domain to enumerate subdomains for"),
      },
      execute: async (args, ctx) => {
        const key = requireApiKey(ctx.config.stApiKey, "SecurityTrails", "ST_API_KEY");
        return json(await stSubdomains(args.domain as string, key));
      },
    };
  • Interface for the st_subdomains result type.
    interface StSubdomainsResult {
      domain: string;
      subdomains: string[]; // FQDNs
      total: number;
    }

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/badchars/osint-mcp-server'

If you have feedback or need assistance with the MCP directory API, please join our Discord server