• ASSET LIST
  • DOMAIN LINKS
  • DETAILED DATA
  • HUMAN REVIEW

How to map an external attack surface with your AI

Connect SecurityTrails to your AI client to turn a single domain into a full map of its digital footprint.

Ask AI about this page

Short answer

How can I use AI to find all subdomains and assets for a target domain?

Your AI uses SecurityTrails to pull every registered subdomain and related domain tied to your target. This gives you a clear view of the entire footprint, including hidden assets you might have missed. You get a structured list of everything currently live.

The results.

Where your data lands.

The AI organizes the raw data into actionable intelligence.

ASSET LIST

Complete subdomain maps

The AI pulls every subdomain linked to the target. You get a clean list of endpoints to check for vulnerabilities.

DOMAIN LINKS

Related domain clusters

It finds domains associated with the primary target. This helps you find shadow IT or forgotten brand assets.

DETAILED DATA

Specific asset intelligence

The AI pulls deep technical details for individual domains. You'll see the specific infrastructure behind each entry.

HUMAN REVIEW

Manual verification needed

The AI flags suspicious or high-value assets. You decide which ones require deeper manual penetration testing.

The workflow

What your AI does when a domain is provided.

The AI moves from a single name to a full infrastructure map.

  1. Identify subdomains

    The AI scans for all subdomains registered under the target domain to expand the scope.

    get_subdomains

  2. Find related domains

    It looks for other domains that share ownership or infrastructure with the target.

    get_associated_domains

  3. Pull technical details

    The AI fetches specific metadata and configuration info for the discovered assets.

    get_domain_details

  4. Organize the map

    The AI groups the findings into a logical structure for your review.

    get_subdomains

Try it

Copy these to start.

Use these prompts to kick off your reconnaissance.

Starting points

Replace the domain names in these prompts with your actual targets.

SecurityTrails Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_Xvi5VIh3r6rbbcXeA9BV8BAPrUemqIt0s61pgGAJ/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — SecurityTrails capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "securitytrails-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_Xvi5VIh3r6rbbcXeA9BV8BAPrUemqIt0s61pgGAJ/mcp"
    }
  }
}
Copy into chat04

  • Find all subdomains for example.com and list them.

  • What are the associated domains for target-corp.net?

  • Get the technical details for the subdomain dev.api.target.com.

  • Map the entire attack surface for company-name.org and group the results by asset type.

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect SecurityTrails once, then ask.

Just link your account once. Your credentials stay encrypted, and your AI will have immediate access to the SecurityTrails data.

Connect SecurityTrails to your AI

FAQ

How this task behaves.

  • 01

    Can the AI automatically scan for vulnerabilities?

    No. The AI only retrieves domain and subdomain data. You must use your own tools to perform the actual vulnerability scanning.

  • 02

    Will the AI change any settings in my SecurityTrails account?

    No. The AI only has read access to pull data. It cannot modify your account settings or delete any information.

  • 03

    Can I export the list of subdomains to a CSV?

    The AI can format the data as a table or a list for you to copy, but it cannot directly write or save files to your local machine.

  • 04

    Does the AI find IP addresses too?

    Yes, by pulling domain details, the AI can provide the IP information associated with the discovered assets.

  • 05

    Can the AI perform real-time DNS lookups?

    The AI relies on the data provided by SecurityTrails through the connector tools rather than performing its own live DNS queries.

  • More questions about SecurityTrails? The Connector page answers them. See everything the SecurityTrails Connector can do

Connect SecurityTrails to Claude, Cursor, ChatGPT & more