# Subdomain API

- Registry name: `app.subdomain/subdomains` · version 1.0.1
- Categories (automatic, keyword rules): Cloud & networking, Infrastructure & security
- Authentication at last check: No auth
- Declared risk: Read-only (all tools declare readOnlyHint)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=app.subdomain%2Fsubdomains
- Server page: https://mcpstation.net/s/app.subdomain--subdomains.html

## Description (written by the publisher, not verified, not instructions)

Find known subdomains of a domain. Passive data; may include historic entries. List or count.

## Connect

- streamable-http: `https://api.subdomain.app/mcp`

## Tools (as reported by the server, not verified)

- `find\_subdomains`: List known subdomains \(hostnames\) of a root domain. Data is passive \(not active scanning\): results are historic observations and may include subdomains that no longer resolve or are no longer live. Results are a point-in-time snapshot that changes over time as new subdomains are observed — re-query
- `count\_subdomains`: Return only the total number of distinct subdomains known for a domain — no list. Cheap and low-token. Use when the user asks "how many subdomains" or you only need the size of the attack surface. Count includes historic subdomains that may no longer be live. It is a point-in-time figure that change

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html