- DOMAIN MAP
- TECH STACK
- QUERY LOG
- HUMAN REVIEW
Short answer
How can I use my AI to map an IP's infrastructure?
Your agent uses SecurityTrails to pull domain lists from specific IPs and runs DSL queries to find tech stacks. You get a clear view of an organization's digital footprint. The breakdown below shows how this works.
The reconnaissance results.
Where your data lands.
Your agent turns raw queries into actionable intelligence.
DOMAIN MAP
Full IP footprint
The AI finds every domain hosted on a specific IP. You get a clean list of targets for your investigation.
TECH STACK
Identify software used
Your agent uses DSL queries to find specific frameworks or services running on the target. This identifies the underlying technology stack.
QUERY LOG
Refined search queries
The AI can help you build or fix complex DSL queries. This lets you narrow down your search for specific assets.
HUMAN REVIEW
Manual validation
The AI provides the raw data, but you decide which domains or technologies are actually relevant to your audit.
The workflow
What your AI does when the request arrives.
The AI acts as the bridge between your natural language and the SecurityTrails database.
Map IP assets
Your agent takes an IP address and finds all associated domains.
get_domains_by_ipExecute deep searches
The AI uses domain-specific language to hunt for granular infrastructure details.
search_dslFilter results
It parses the returned data to isolate the specific tech stacks you need.
search_dslSummarize findings
The agent organizes the domain and tech data into a readable format for you.
get_domains_by_ipsearch_dsl
Try it
Copy these to start.
Use these prompts to kick off your reconnaissance.
Starting points
Swap out the IP addresses or technology names with your actual targets.
SecurityTrails Connector
You're all set. Choose your MCP client and follow the setup instructions.
https://edge.vinkius.com/vk_preview_Xvi5VIh3r6rbbcXeA9BV8BAPrUemqIt0s61pgGAJ/mcpClaude Desktop
Follow the steps below to connect in seconds.
- 1In Claude Desktop, open Settings → Connectors.
- 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
- 3Click Add and start a new chat — SecurityTrails capabilities are ready to use.
{
"mcpServers": {
"securitytrails-mcp": {
"url": "https://edge.vinkius.com/vk_preview_Xvi5VIh3r6rbbcXeA9BV8BAPrUemqIt0s61pgGAJ/mcp"
}
}
}Find all domains hosted on the IP address 192.0.2.1.
Use a DSL query to find all domains using Cloudflare on SecurityTrails.
List all subdomains associated with the IP 203.0.113.42.
Search for any infrastructure using Nginx based on my target list.
Claude
ChatGPT
Cursor
VS Code
Windsurf
Claude Code
JetBrains
Cline
Start here
Connect SecurityTrails once, then ask.
Link your account once. Your credentials stay encrypted, and you can immediately start querying via your preferred AI client.
Connect SecurityTrails to your AIFAQ
How this task behaves.
- 01
Can the AI change my SecurityTrails settings?
No. The AI only reads data through the provided tools; it cannot modify your account or configuration.
- 02
Does the AI perform active network scanning?
No. The AI uses the SecurityTrails API to retrieve existing records. It does not run active probes or scans against live targets.
- 03
Can I use this to find subdomains?
Yes, you can use the IP lookup or DSL queries to find associated domain records.
- 04
Will the AI delete any of my data?
No. The tools are strictly for data retrieval.
- 05
Can the AI write DSL queries for me?
Yes, you can ask your agent to construct specific DSL queries based on your requirements.
More questions about SecurityTrails? See everything the SecurityTrails Connector can do
Connect SecurityTrails to Claude, Cursor, ChatGPT & more
