Find subdomains

List known subdomains (hostnames) of a root domain. Data is passive (not active scanning): results are historic observations and may include subdomains that no

liveverifiedunknown~5s typical

mcpprobedsubdomainapi

$0.0020

per call

plus $0.001 platform fee per run

Open MCP server; Cracked bills routing only

Provider Upstream docs

$Set up https://cracked-ai-pearl.vercel.app/SKILL.md, then use Cracked to run mcp-app-subdomain-subdomains /find_subdomains for me.

Input

Field	Type	Description
domain*	string	Root (registrable) domain as a bare hostname, e.g. "example.com". No scheme, path, port, o
limit	integer	Max subdomains to return (1-1000, default 200). `total` always reports the full count rega default 200

Call it

curl

curl https://cracked-ai-pearl.vercel.app/v1/run \
  -H "Authorization: Bearer ck_live_..." -H "content-type: application/json" \
  -d '{"provider":"mcp-app-subdomain-subdomains","endpoint":"/find_subdomains","input":{"domain":"...","limit":200}}'

cli

npx cracked-ai run -p mcp-app-subdomain-subdomains -e /find_subdomains -i '{"domain":"...","limit":200}'

mcp

run_tool({ provider: "mcp-app-subdomain-subdomains", endpoint: "/find_subdomains", input: {"domain":"...","limit":200} })

Try it

Runs against your signed-in workspace balance. Sign in if you have not.