Subdomain Finder MCP
Passive subdomain enumeration from certificate transparency (certspotter, crt.sh) with DNS checks.
What it does
Subdomain Finder MCP is an MCP server, a connector that lets an AI assistant use it as a tool. It is hosted: an assistant connects to it over the internet, nothing to install.
No capability identified yet from its description.
Facts come from the Official MCP Registry, as declared by the publisher. Capabilities are matched automatically (low confidence). None of this is a test of the tool.
At a glance
How to connect
As declared in the Official MCP Registry · hosted endpoint tested by Electra Index 6h ago (live check)Hosted endpoint
https://subdomain-finder-mcp.lipmichal.workers.dev/mcpstreamable-http
In Claude Code: claude mcp add --transport http subdomain-finder-mcp https://subdomain-finder-mcp.lipmichal.workers.dev/mcp
MCP settings (Claude Desktop, Cursor and other MCP clients)
{
"mcpServers": {
"subdomain-finder-mcp": {
"url": "https://subdomain-finder-mcp.lipmichal.workers.dev/mcp"
}
}
}Live check
Electra Index connected to the hosted endpoint 6h agoONLINE Subdomain Finder MCP answered an MCP connection on 02 Nov 2026 and introduced itself as subdomain-finder-mcp 1.0.0 (MCP protocol 2025-06-18).
4 tools offered to AI assistants
find_subdomains· Passive subdomain enumeration for a domain from live certificate transparency logs: certspotter (unexpired certificates) with crt.sh as fallback or for expired history. Returns deduplicated hostnames with first seen and last seen issuance dresolve_subdomains· Resolve up to 40 hostnames now through Cloudflare DNS over HTTPS (A, AAAA and the CNAME chain). Each host is marked live, nxdomain, no_records or dangling_cname (a CNAME whose target does not exist, a subdomain takeover lead), and CNAME target_certificate_history· Certificates logged in certificate transparency for one hostname (or a whole domain with include_subdomains): issuer organisation and DN, not_before and not_after dates, every SAN on the certificate, revocation status and SHA-256 where certsummarize_attack_surface· Reads a domain's subdomains from live certificate transparency and groups them for recon triage: development and test, staging, admin and internal tools, APIs, authentication, mail, remote access (VPN), storage and CDN, legacy and backup. E
What "online" means: the server answered an MCP connection at the time of the check. It is not a guarantee of security, quality or continuous uptime. How we test: we open an MCP session and ask for the tool list, as an AI assistant would. We never run a tool and never send a key. Checked every few days. Method
Is this your server? Monitoring Pro: a check every 30 minutes and an email within the hour when it stops answering. Launch offer: $39.99 once, for life.
Facts & evidence
Each fact shows where it was seen and when.| Fact | Value | Evidence | Source | Last confirmed |
|---|---|---|---|---|
| Hosted endpoint | https://subdomain-finder-mcp.lipmichal.workers.dev/mcp | DECLARED | SRC-001 Official MCP Registry | 4h ago |
| Local install (package) | no | DECLARED | SRC-001 Official MCP Registry | 4h ago |
| Remote access (hosted) | yes | DECLARED | SRC-001 Official MCP Registry | 4h ago |
| Website | https://bugbountyreality.com/tools/subdomain-finder-real/ | DECLARED | SRC-001 Official MCP Registry | 4h ago |
| Repository | https://github.com/theluckystrike/subdomain-finder-mcp | DECLARED | SRC-001 Official MCP Registry | 4h ago |
| Registry status | active | DECLARED | SRC-001 Official MCP Registry | 4h ago |
| Version | 1.0.0 | DECLARED | SRC-001 Official MCP Registry | 4h ago |
| MCP server | yes | DECLARED | SRC-001 Official MCP Registry | 4h ago |
Change history
- NEW02 Nov 2026first seen in the index
Is this page accurate?
Flag it and our robot re-checks the official source. Reports never change a score.Is Subdomain Finder MCP still online?
Free alerts · no account▲ 0Do you run Subdomain Finder MCP? Know when it stops answering
For publishers · optionalIts hosted endpoint can be monitored. Monitoring Pro connects every 30 minutes like an AI assistant, emails you within the hour when it stops answering, keeps a 90-day availability history and adds your answer rate to your badge.
Monitoring never changes a score or a rank.
Questions about Subdomain Finder MCP
How do I connect Subdomain Finder MCP?
Use the hosted endpoint https://subdomain-finder-mcp.lipmichal.workers.dev/mcp in your assistant's MCP settings. The exact settings are in "How to connect" above, as declared in the Official MCP Registry.
What tools does Subdomain Finder MCP offer?
When Electra Index connected on 02 Nov 2026, it listed 4 tools: find_subdomains, resolve_subdomains, get_certificate_history, summarize_attack_surface. The full list is in "Live check" above.
Is Subdomain Finder MCP online?
Yes. Its hosted endpoint answered an MCP connection from Electra Index 6h ago.