io.github.theluckystrike/subdomain-finder-mcp

up checked 2026-11-11T03:37:31.126Z

Unclaimed · Unverified

Agent searches it appeared in, last 30 days: 0. Run this server? Claim the listing: verified label, uptime alerts and analytics.

Publisher-provided title

Subdomain Finder MCP

Publisher-provided description

Passive subdomain enumeration from certificate transparency (certspotter, crt.sh) with DNS checks.

Summary by lookupd

Enumerates a domain's subdomains from certificate transparency logs, checks their DNS resolution, and groups them for reconnaissance triage.

Install

Claude Code, remote (streamable-http)

claude mcp add --transport http subdomain-finder https://subdomain-finder-mcp.lipmichal.workers.dev/mcp

Codex, remote (streamable-http)

codex mcp add subdomain-finder --url https://subdomain-finder-mcp.lipmichal.workers.dev/mcp

Cursor, remote (streamable-http) → .cursor/mcp.json

{
  "mcpServers": {
    "subdomain-finder": {
      "url": "https://subdomain-finder-mcp.lipmichal.workers.dev/mcp"
    }
  }
}

Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.

Tools (4 tools)

Publisher-provided text

• find_subdomains Passive subdomain enumeration for a domain from live certificate transparency logs: certspotter (unexpired certificates) with crt.sh as fallback or for expired
• resolve_subdomains Resolve up to 40 hostnames now through Cloudflare DNS over HTTPS (A, AAAA and the CNAME chain). Each host is marked live, nxdomain, no_records or dangling_cname
• get_certificate_history Certificates logged in certificate transparency for one hostname (or a whole domain with include_subdomains): issuer organisation and DN, not_before and not_aft
• summarize_attack_surface Reads a domain's subdomains from live certificate transparency and groups them for recon triage: development and test, staging, admin and internal tools, APIs,

Details

• Version: 1.0.0
• Transports: streamable-http
• Uptime (7 days): 100%
• Median latency: 662 ms
• First indexed: 2026-11-02T03:17:22.632Z
• Last seen in registry: 2026-11-02T03:17:22.632Z
• Repository: https://github.com/theluckystrike/subdomain-finder-mcp
• Website: https://bugbountyreality.com/tools/subdomain-finder-real/

Badge for your README

Shows this live status and links here; updates hourly.

[![lookupd status](https://lookupd.com/badge/io.github.theluckystrike/subdomain-finder-mcp.svg)](https://lookupd.com/servers/io.github.theluckystrike/subdomain-finder-mcp)

• 62174 servers
• Last crawl: 2026-11-11T19:17:20.153Z
• API base: https://api.lookupd.com
• MCP URL: https://api.lookupd.com/mcp