Is the SecurityTrails API free to use?

SecurityTrails offers a Free Tier API plan which allows 50 API requests per month. This is excellent for specific, targeted OSINT investigations. For automated or large-scale recon, you would need a commercial subscription.

What is historical DNS good for?

Companies often migrate infrastructure and hide behind WAFs like Cloudflare. Historical DNS reveals the original origin IP addresses used before the WAF was implemented, which might still be active and vulnerable to direct attacks. It's a critical tool in penetration testing.

How can I find related domains for a target company?

Use the `get_associated_domains` tool. It uses proprietary correlation to find other domains owned by the same entity. You can also use `get_domains_by_ip` to find what else is hosted on their IP space.

SecurityTrails MCP Server for Mastra AI 10 tools — connect in under 2 minutes

Name: SecurityTrails
Availability: InStock
Author: Vinkius

docs.mastra.ai/docs/agents/mcp-tools

Built by Vinkius GDPR 10 Tools SDK

Mastra AI is a TypeScript-native agent framework built for modern web stacks. Connect SecurityTrails through Vinkius and Mastra agents discover all tools automatically. type-safe, streaming-ready, and deployable anywhere Node.js runs.

Get MCP Server for AI Agents

ASK AI ABOUT THIS MCP SERVER

Open in ChatGPT Open in Claude Open in Perplexity

Vinkius supports streamable HTTP and SSE.

typescript

import { Agent } from "@mastra/core/agent";
import { createMCPClient } from "@mastra/mcp";
import { openai } from "@ai-sdk/openai";

async function main() {
  // Your Vinkius token. get it at cloud.vinkius.com
  const mcpClient = await createMCPClient({
    servers: {
      "securitytrails": {
        url: "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp",
      },
    },
  });

  const tools = await mcpClient.getTools();
  const agent = new Agent({
    name: "SecurityTrails Agent",
    instructions:
      "You help users interact with SecurityTrails " +
      "using 10 tools.",
    model: openai("gpt-4o"),
    tools,
  });

  const result = await agent.generate(
    "What can I do with SecurityTrails?"
  );
  console.log(result.text);
}

main();

Fully ManagedVinkius Servers

60%Token savings

High SecurityEnterprise-grade

IAMAccess control

EU AI ActCompliant

DLPData protection

V8 IsolateSandboxed

Ed25519Audit chain

<40msKill switch

Stream every event to Splunk, Datadog, or your own webhook in real-time

* Every MCP server runs on Vinkius-managed infrastructure inside AWS - a purpose-built runtime with per-request V8 isolates, Ed25519 signed audit chains, and sub-40ms cold starts optimized for native MCP execution. See our infrastructure

About SecurityTrails MCP Server

Connect your SecurityTrails account to any AI agent and empower your OSINT, bug bounty, and threat intelligence workflows with the world's most comprehensive domain and IP database.

Mastra's agent abstraction provides a clean separation between LLM logic and SecurityTrails tool infrastructure. Connect 10 tools through Vinkius and use Mastra's built-in workflow engine to chain tool calls with conditional logic, retries, and parallel execution. deployable to any Node.js host in one command.

What you can do

Attack Surface Mapping — Instantly enumerate all subdomains for any target organization to map their external footprint
Historical DNS Analysis — Look back in time at DNS records (A, MX, NS, TXT) to find hidden infrastructure, bypassed firewalls, or legacy systems
Reverse IP Lookups — Find all domains hosted on a specific IP address to identify shared hosting or related corporate assets
Advanced Threat Hunting — Use the SecurityTrails DSL (Domain Specific Language) to query the entire internet for specific tech stacks or vulnerable infrastructure
Ownership Intelligence — Access current and historical WHOIS records to track domain ownership changes and unmask hidden threat actors
Corporate Associations — Discover domains strongly associated with your primary target to expand your investigation scope

The SecurityTrails MCP Server exposes 10 tools through the Vinkius. Connect it to Mastra AI in under two minutes — no API keys to rotate, no infrastructure to provision, no vendor lock-in. Your configuration, your data, your control.

How to Connect SecurityTrails to Mastra AI via MCP

Follow these steps to integrate the SecurityTrails MCP Server with Mastra AI.

Install dependencies

Run npm install @mastra/core @mastra/mcp @ai-sdk/openai

Replace the token

Replace [YOUR_TOKEN_HERE] with your Vinkius token

Run the agent

Save to agent.ts and run with npx tsx agent.ts

Explore tools

Mastra discovers 10 tools from SecurityTrails via MCP

Why Use Mastra AI with the SecurityTrails MCP Server

Mastra AI provides unique advantages when paired with SecurityTrails through the Model Context Protocol.

Mastra's agent abstraction provides a clean separation between LLM logic and tool infrastructure. add SecurityTrails without touching business code

Built-in workflow engine chains MCP tool calls with conditional logic, retries, and parallel execution for complex automation

TypeScript-native: full type inference for every SecurityTrails tool response with IDE autocomplete and compile-time checks

One-command deployment to any Node.js host. Vercel, Railway, Fly.io, or your own infrastructure

SecurityTrails + Mastra AI Use Cases

Practical scenarios where Mastra AI combined with the SecurityTrails MCP Server delivers measurable value.

Automated workflows: build multi-step agents that query SecurityTrails, process results, and trigger downstream actions in a typed pipeline

SaaS integrations: embed SecurityTrails as a first-class tool in your product's AI features with Mastra's clean agent API

Background jobs: schedule Mastra agents to query SecurityTrails on a cron and store results in your database automatically

Multi-agent systems: create specialist agents that collaborate using SecurityTrails tools alongside other MCP servers

SecurityTrails MCP Tools for Mastra AI (10)

These 10 tools become available when you connect SecurityTrails to Mastra AI via MCP:

get_api_usage

Check current SecurityTrails API quota usage

get_associated_domains

Great for expanding the scope of an investigation. Find other domains associated with a target domain

get_dns_history

Useful for finding old IPs that might still be hosting vulnerable software, or tracking infrastructure migration over time. Retrieve historical DNS records for a domain

get_domain_details

Essential for mapping out a target domain's existing infrastructure. Get complete domain intelligence and current DNS records

get_domain_tags

Get classification tags for a domain

get_domains_by_ip

Essential for understanding shared hosting environments or identifying hidden vhosts. Find all domains pointed to a specific IP address

get_subdomains

Critical for attack surface mapping and asset discovery. Returns both active and inactive subdomains. Discover all subdomains for a given domain

get_whois

Get current WHOIS information for a domain

get_whois_history

Useful for OSINT investigations to uncover historical owners before privacy protection was enabled. Retrieve historical WHOIS records for a domain

search_dsl

Examples: `ipv4="1.1.1.1" AND mx="alt1.aspmx.l.google.com"` or `whois_email="admin@example.com"`. Check SecurityTrails docs for full DSL syntax. Advanced search using SecurityTrails DSL