Vinkius

SecurityTrails MCP. Map an Organization's Entire Digital History

SecurityTrails MCP connects deep domain and IP intelligence into your AI agent. Instantly map an organization's entire digital footprint by accessing historical DNS records, enumerating hidden subdomains, checking WHOIS ownership changes, and running advanced threat queries against the world's largest database of network data.

SecurityTrails MCP is compatible with Claude Claude
SecurityTrails MCP is compatible with ChatGPT ChatGPT
SecurityTrails MCP is compatible with Cursor Cursor
SecurityTrails MCP is compatible with Gemini Gemini
SecurityTrails MCP is compatible with Windsurf Windsurf
SecurityTrails MCP is compatible with VS Code VS Code
SecurityTrails MCP is compatible with JetBrains JetBrains
SecurityTrails MCP is compatible with Vercel Vercel
See Vinkius in Action

Give Claude and any AI agent real-world access

Map Asset Footprint

Automatically discovers all active and inactive subdomains linked to a target domain.

Trace Historical Records

Retrieves past DNS records (A, MX, NS, TXT) to map out how an organization's infrastructure has changed over time.

Identify Shared Infrastructure

Finds all domains that share the same IP address, helping locate hidden virtual hosts or related assets.

Determine Ownership Changes

Accesses current and historical WHOIS data to track domain ownership changes and identify potential malicious actors.

Execute Advanced Queries

Uses a specific Domain Specific Language (DSL) to query the entire internet for niche tech stacks or vulnerable infrastructure patterns.

Waiting for input…

AI Agent
SecurityTrails

What AI agents can do with SecurityTrails MCP with 10 Tools

These tools let you perform deep intelligence queries, covering everything from current domain registration to historical IP usage.

Make your AI actually useful.

Add this MCP to Claude, Cursor, or Windsurf and your AI stops guessing. It gets real tools to look things up, take action, and handle the stuff you keep doing by hand.

Start using SecurityTrails MCP

Get Api Usage

Checks how much of your SecurityTrails API quota you've used for the day.

Get Domain Tags

Provides classification tags that categorize the purpose and type of a specific...

Get Dns History

Retrieves historical DNS records for a domain, useful for seeing old IPs or tracking...

Get Subdomains

Discovers all subdomains for a given domain, regardless of whether they are...

Get Whois

Gets the current registration and ownership information (WHOIS) for any specified...

Search Dsl

Runs highly advanced, targeted queries across the entire internet using the full SecurityTrails Domain Specific Language syntax.

Get Domains By Ip

Lists all domains that have been pointed to a single IP address, identifying shared hosting environments.

Get Domain Details

Gathers complete current domain intelligence, including DNS records and core...

Get Associated Domains

Finds other domains that are strongly linked to a primary target domain, expanding...

Get Whois History

Retrieves historical WHOIS records for a domain, useful for tracking owners before...

Security and governance baked right in.

Pick your AI client below to get set up. Just create a Vinkius account, subscribe, and you're instantly up and running. We handle the entire backend infrastructure, delivering out-of-the-box support for HTTPS Streamable, SSE, and OAuth2—zero messy routing required.

SecurityTrails MCP is compatible with Claude

Claude AI

1

Open Claude Settings

Go to claude.ai, click your profile icon, then navigate to Customize → Connectors.

2

Add Custom Connector

Click the "+" button and select Add custom connector. Paste your Vinkius endpoint URL:

https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp

Replace [YOUR_TOKEN_HERE] with your token from cloud.vinkius.com. For OAuth-protected servers, expand Advanced settings to add credentials.

3

Start a conversation

Open a new chat. The SecurityTrails integration is available immediately — no restart needed.

Choose How to Get Started

Build a custom MCP for your own tools, or connect a ready-made integration from our catalog.

Build Your Own

Turn any API into an MCP. Import a spec, define Agent Skills, or deploy with MCPFusion.

  • Import from OpenAPI, Swagger, or YAML specs
  • Create Agent Skills with progressive disclosure
  • Deploy to edge with MCPFusion framework
  • Built in DLP, auth, and compliance on each call
  • Real time usage dashboard and cost metering
  • Publish to catalog or keep private
Start building

Make Your AI Do More

Start with SecurityTrails, then connect any of our 5,200+ other servers whenever your AI needs more. One click, no limits.

  • Use this MCP plus 5,200+ others, all in one place
  • Add new capabilities to your AI anytime you want
  • Connections are secured and governed automatically
  • Track usage and costs across all your servers
  • Works with Claude, ChatGPT, Cursor, and more
  • New servers added to the catalog weekly
SecurityTrails MCP server cover

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by SecurityTrails. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

VINKIUS CLOUD

Cloud Hosted

Managed infra

V8 Isolated

Sandboxed per request

Zero-Trust Proxy

No stored credentials

DLP Enforced

Policy on each call

GDPR Compliant

EU data residency

Token Compression

~60% cost reduction

Your data is protected. See how we built it.

The Pain of Manual Digital Forensics

Right now, mapping an organization's infrastructure is a tedious crawl through multiple interfaces. You check the main site, then jump to a separate WHOIS page for ownership details. Then you have to run a subdomain brute-forcer, and if that fails, you try looking up historical DNS records on another service. It’s copy-pasting between three or four different tabs just to get one coherent picture.

With this MCP, your agent handles all those jumps. You tell it the target, and it orchestrates checks for current details, past ownership, associated domains, and deep subdomains—all in a single conversation thread. You get the full intelligence map without leaving your chat.

SecurityTrails MCP: Comprehensive Domain Intelligence

Before this MCP, tracking domain ownership meant relying on basic WHOIS lookups that often failed or were outdated. Tracking infrastructure changes required manual checks of historical DNS logs, which few services provided in a unified format.

Now, you can ask for the full picture: who owned it, what IPs did it use years ago, and every single domain linked to it—all instantly available through your AI agent.

What SecurityTrails MCP does for your AI

You can use this MCP to treat any target domain like a live intelligence feed. Instead of spending hours clicking through separate databases for IP history, you ask your agent to find connections between domains, IPs, and people. It pulls together historical DNS records—the kind that show where an organization was five years ago but has since abandoned.

You can expand the scope of any investigation by finding other domains associated with a primary target or look up every domain hosted on a specific IP address. These capabilities let you track infrastructure migration, unmask forgotten assets, and identify potential brand squatters before they cause trouble. Connecting this MCP through Vinkius allows your agent to perform these complex OSINT tasks without needing specialized terminal commands.

You simply ask the question, and it gives you the historical data required for bug bounty hunting or threat intelligence.

Built · Hosted · Managed by Vinkius SecurityTrails - Map Domain History & OSINT
Server ID 019d847b-e7b9-700b-938e-d6bdc7e4a90b
Vinkius Inspector
Compliance Grade A+
Score 98.33/100
Vinkius Inspector Badge — Score 98.33/100

Frequently asked questions about SecurityTrails MCP

What is the difference between `get_subdomains` and `get_associated_domains` using SecurityTrails MCP? +

get_subdomains finds all variations attached to a single domain (like 'staging.example.com'). get_associated_domains, however, finds entirely separate domains that are strongly linked to the primary target company.

Can I use SecurityTrails MCP to find out who owned a domain in 2015? +

Yes. You must use get_whois_history or get_dns_history. These tools retrieve historical records, bypassing modern privacy protections that hide old ownership data.

Does SecurityTrails MCP only work for major corporate websites? +

No. It handles anything from large corporations to small personal sites, allowing you to run advanced searches using the search_dsl tool on any domain or IP range.

How do I check if a domain is part of a larger network? +

Run get_domains_by_ip. This tool lists every known domain that shares an IP address, which is critical for identifying shared hosting or hidden virtual machines.

Is SecurityTrails MCP better than standard DNS lookup tools? +

Yes. Standard lookups only give you the current record. This MCP provides historical depth and cross-referencing capabilities that connect ownership, IP usage, and domain names over time.

Is the SecurityTrails API free to use? +

SecurityTrails offers a Free Tier API plan which allows 50 API requests per month. This is excellent for specific, targeted OSINT investigations. For automated or large-scale recon, you would need a commercial subscription.

What is historical DNS good for? +

Companies often migrate infrastructure and hide behind WAFs like Cloudflare. Historical DNS reveals the original origin IP addresses used before the WAF was implemented, which might still be active and vulnerable to direct attacks. It's a critical tool in penetration testing.

How can I find related domains for a target company? +

Use the get_associated_domains tool. It uses proprietary correlation to find other domains owned by the same entity. You can also use get_domains_by_ip to find what else is hosted on their IP space.