SecurityTrails MCP Connector for Claude

Connect your SecurityTrails account to any AI agent and empower your OSINT, bug bounty, and threat intelligence workflows with the world's most comprehensive domain and IP database.

What you can do

• Attack Surface Mapping — Instantly enumerate all subdomains for any target organization to map their external footprint
• Historical DNS Analysis — Look back in time at DNS records (A, MX, NS, TXT) to find hidden infrastructure, bypassed firewalls, or legacy systems
• Reverse IP Lookups — Find all domains hosted on a specific IP address to identify shared hosting or related corporate assets
• Advanced Threat Hunting — Use the SecurityTrails DSL (Domain Specific Language) to query the entire internet for specific tech stacks or vulnerable infrastructure
• Ownership Intelligence — Access current and historical WHOIS records to track domain ownership changes and unmask hidden threat actors
• Corporate Associations — Discover domains strongly associated with your primary target to expand your investigation scope

How it works

1. Subscribe to this server
2. Sign up at SecurityTrails to get your API key (Free tier available)
3. Run intelligence queries directly from Claude, Cursor, or any MCP-compatible client

Who is this for?

• Security Researchers & Pentesters — accelerate recon and asset discovery during engagements
• Bug Bounty Hunters — find forgotten subdomains and out-of-scope assets associated with target companies
• Threat Intelligence Analysts — correlate IPs, domains and WHOIS records to track APT infrastructure
• Brand Protection Teams — identify typosquatting and malicious domains targeting your organization
• System Administrators — audit their own external attack surface and verify DNS propagation