Do I need a SecurityTrails account?

Yes, you need to sign up at SecurityTrails to get an API key. A free tier is available.

Which AI clients can I use with this MCP?

You can use this with any MCP-compatible client, including Claude, Cursor, and Windsurf.

How do I check my remaining API credits?

You can ask your AI agent to use the get_api_usage capability to check your current quota.

Can I search for specific tech stacks?

Yes, you can use the search_dsl capability to run advanced queries across the internet using SecurityTrails DSL.

Does this MCP host the data?

No, the MCP acts as a bridge. Vinkius hosts the connector and manages the connection, but the data comes directly from SecurityTrails.

Is the SecurityTrails API free to use?

SecurityTrails offers a Free Tier API plan which allows 50 API requests per month. This is excellent for specific, targeted OSINT investigations. For automated or large-scale recon, you would need a commercial subscription.

What is historical DNS good for?

Companies often migrate infrastructure and hide behind WAFs like Cloudflare. Historical DNS reveals the original origin IP addresses used before the WAF was implemented, which might still be active and vulnerable to direct attacks. It's a critical capability in penetration testing.

How can I find related domains for a target company?

Use the get_associated_domains capability. It uses proprietary correlation to find other domains owned by the same entity. You can also use get_domains_by_ip to find what else is hosted on their IP space.

An astronaut overseeing a futuristic data hub

Download PDF Markdown Version

Connect SecurityTrails to ChatGPT, Claude and Gemini

Set it up once and it works in ChatGPT, Claude, Cursor, and any other client you love. It all runs safely in the background, so you can relax and focus on what really matters. Map attack surfaces and hunt threats using your AI client.

Ask AI about this Connector

Developed, maintained, and hosted by Vinkius.

MCP VERIFIED · PRODUCTION READY · VINKIUS GUARANTEED

Waiting for input…

Works with modern AI clients that support MCP, including ChatGPT, Claude, Cursor, and more.

Your AI does the work. We keep it safe and sound.

No other AI tool gives you this. Your workflow runs in the client you already love, your account stays protected, and you decide what the agent can and cannot do. It is the whole reason to make the switch.

Each Connector lives inside our infrastructure, the same place where your workflow runs. The three things below are already part of it, working quietly in the background so you never have to think about them. Nothing to add, nothing to set up, nothing to worry about.

V8 Isolate01

Each Connector runs inside its own sealed environment.

Each Connector runs inside its own sealed V8 runtime — no access to your files, your system, or other servers. A Connector never sees past its own request.

Kill Switch02

One switch stops every agent. Instantly.

One action deactivates every Connector, revokes every token, and ends every session at once. AI Governance keeps the record.

FinOps per User03

Spending limits that pause instead of surprise.

Every user keeps their own connections and credentials, isolated from everyone else. Anything that would cross your spending limit is held for your approval, not billed.

Three controls, built into the layer your AI connects through.

Curated set · 10 capabilities

We ship only the actions that matter.

Capability set01 / 03

01-04

4 capabilities in this set.

Part of 10 available through SecurityTrails.

01
Search dsl
Performs advanced searches using SecurityTrails DSL. You can query specific attributes like IP addresses or MX records using custom syntax.
02
Get API usage
Checks your current SecurityTrails API quota. Use this to monitor how many requests your agent has left.
03
Get dns history
Retrieves historical DNS records for a domain. This helps you find old IPs or track how infrastructure has migrated over time.
04
Get domain tags
Fetches classification tags for a specific domain to understand its category or purpose.

Capability set02 / 03

05-07

3 capabilities in this set.

Part of 10 available through SecurityTrails.

05
Get subdomains
Discovers both active and inactive subdomains for a target domain. This is your primary capability for attack surface mapping.
06
Get whois
Gets the current WHOIS information for a domain to identify ownership and registration details.
07
Get domain details
Provides complete domain intelligence and current DNS records for a target.

Capability set03 / 03

08-10

3 capabilities in this set.

Part of 10 available through SecurityTrails.

08
Get domains by ip
Finds all domains hosted on a specific IP address. Use this to identify shared hosting or hidden virtual hosts.
09
Get associated domains
Identifies other domains associated with a target domain to help expand your investigation scope.
10
Get whois history
Retrieves historical WHOIS records. This is useful for finding original owners before they enabled privacy protection.

Real work

What teams actually run

Reconnaissance

An attacker or researcher maps an organization's entire external footprint using subdomain enumeration.

Infrastructure Migration Tracking

A sysadmin uses historical DNS records to verify how and when their IP addresses changed.

Threat Actor Attribution

An analyst uses WHOIS history to find the original owner of a malicious domain.

Shared Hosting Audits

A researcher performs reverse IP lookups to see what other domains live on a target's server.

Automate a task

Put SecurityTrails to work on one thing.

Step-by-step automations your AI runs through this Connector: the workflow, the prompts to start with, and the exact capabilities behind each move.

One connector, every AI

SecurityTrails works with the most popular AI clients.

These are the most popular clients, each with a step-by-step guide: one link, set up once, with governance and visibility built in. And because everything runs on the MCP standard, the same connection also works in any other compatible client — nothing to rebuild.

Building your own app? The connector is yours to use.

You don't need a client to put SecurityTrails to work: the same hosted connection plugs into your own applications and agent code, with the same governance on every request. Build with it, chat with it — one connection for both.

Observed, not estimated

1003ms average. Fast in production.

SecurityTrails is checked daily against the live service.

Daily averagePeak 1155ms

Oct 3Today

Fastest day: 733ms
Slowest day: 1155ms
14-day trend: Slowing+9%

Connect your client

One URL. Every client.

Activate the Connector, copy your link, and paste it into the client you already use. 10 capabilities arrive ready to run.

Preview access · not provider authentication

The vk_preview_* token belongs to Vinkius preview infrastructure. It lets Claude discover and display the capabilities of SecurityTrails, so you can see the experience inside your AI.

It does not authenticate your account with SecurityTrails. Actions requiring credentials or live account data may not run until you activate the Connector and authorize the service.

SecurityTrails Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_Xvi5VIh3r6rbbcXeA9BV8BAPrUemqIt0s61pgGAJ/mcp

Claude Desktop

Follow the steps below to connect in seconds.

1In Claude Desktop, open Settings → Connectors.
2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
3Click Add and start a new chat — SecurityTrails capabilities are ready to use.

Configuration · claude_desktop_config.jsonCopy

{
  "mcpServers": {
    "securitytrails-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_Xvi5VIh3r6rbbcXeA9BV8BAPrUemqIt0s61pgGAJ/mcp"
    }
  }
}

Claude
ChatGPT
Cursor
VS Code
Windsurf
Claude Code
JetBrains
Cline

Step-by-step instructions for each client are in the guide. How to connect

Guided setup for Claude? Set up SecurityTrails in Claude and other AIs

See all the AI clients this connector works with ↑

Who it's for

Built for the work SecurityTrails owners hand off.

This MCP is built for security professionals who need to automate reconnaissance and data gathering.

01
Security Researchers
They use the agent to automate asset discovery during active engagements.
02
Bug Bounty Hunters
They task the agent with finding forgotten subdomains or out-of-scope assets.
03
Threat Intelligence Analysts
They use the agent to correlate IPs and WHOIS records to track APT infrastructure.
04
Brand Protection Teams
They rely on the agent to identify typosquatting and malicious domains.

FAQ

Questions SecurityTrails owners ask.

01
Do I need a SecurityTrails account?
Yes, you need to sign up at SecurityTrails to get an API key. A free tier is available.
02
Which AI clients can I use with this MCP?
You can use this with any MCP-compatible client, including Claude, Cursor, and Windsurf.
03
How do I check my remaining API credits?
You can ask your AI agent to use the get_api_usage capability to check your current quota.
04
Can I search for specific tech stacks?
Yes, you can use the search_dsl capability to run advanced queries across the internet using SecurityTrails DSL.
05
Does this MCP host the data?
No, the MCP acts as a bridge. Vinkius hosts the connector and manages the connection, but the data comes directly from SecurityTrails.
06
Is the SecurityTrails API free to use?
SecurityTrails offers a Free Tier API plan which allows 50 API requests per month. This is excellent for specific, targeted OSINT investigations. For automated or large-scale recon, you would need a commercial subscription.
07
What is historical DNS good for?
Companies often migrate infrastructure and hide behind WAFs like Cloudflare. Historical DNS reveals the original origin IP addresses used before the WAF was implemented, which might still be active and vulnerable to direct attacks. It's a critical capability in penetration testing.
08
How can I find related domains for a target company?
Use the get_associated_domains capability. It uses proprietary correlation to find other domains owned by the same entity. You can also use get_domains_by_ip to find what else is hosted on their IP space.

Explore

More in Security Compliance

Connect SecurityTrails to Claude, Cursor, ChatGPT & more

Your AI does the work. We keep it safe and sound.

Each Connector runs inside its own sealed environment.

One switch stops every agent. Instantly.

Spending limits that pause instead of surprise.

We ship only the actions that matter.

01-04

Search dsl

Get API usage

Get dns history

Get domain tags

05-07

Get subdomains

Get whois

Get domain details

08-10

Get domains by ip

Get associated domains

Get whois history

What teams actually run

Reconnaissance

Infrastructure Migration Tracking

Threat Actor Attribution

Shared Hosting Audits

Building your own app? The connector is yours to use.

SecurityTrails Connector

Claude Desktop

Security Researchers

Bug Bounty Hunters

Threat Intelligence Analysts

Brand Protection Teams

Do I need a SecurityTrails account?

Which AI clients can I use with this MCP?

How do I check my remaining API credits?

Can I search for specific tech stacks?

Does this MCP host the data?

Is the SecurityTrails API free to use?

What is historical DNS good for?

How can I find related domains for a target company?

WhoisXML AI Connector

DNSimple AI Connector

Bugcrowd AI Connector

IPinfo AI Connector

Suggestions

Cloud DNS (Anycast DNS Provider API) AI Connector

NS1 (IBM NS1 Premium DNS API) AI Connector

BugHerd AI Connector

Family History Archive Plan AI Connector