Subdomain Finder
Pricing
Pay per event
This actor discovers subdomains by querying certificate transparency logs via crt.sh. It finds all SSL/TLS certificates ever issued for a domain, extracting unique subdomain names. This passive reconnaissance technique requires no direct scanning.
You can access the Subdomain Finder programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in Integrations settings in Apify Console.
{ "mcpServers": { "apify": { "command": "npx", "args": [ "mcp-remote", "https://mcp.apify.com/?tools=automation-lab/subdomain-finder", "--header", "Authorization: Bearer <YOUR_API_TOKEN>" ] } }}Get a ready-to-use configuration for your MCP client with the Subdomain Finder - Certificate Transparency Lookup Actor preconfigured at mcp.apify.com?tools=automation-lab/subdomain-finder .
You can connect to the Apify MCP Server using clients like Tester MCP Client, or any other MCP client of your choice.
If you want to learn more about our Apify MCP implementation, check out our MCP documentation. To learn more about the Model Context Protocol in general, refer to the official MCP documentation or read our blog post.