`crtsh_search_domain`

Pack: crtsh · Endpoint: https://gateway.pipeworx.io/crtsh/mcp

No MCP client? Call it directly: GET https://gateway.pipeworx.io/v1/tools/crtsh_search_domain for the schema, then POST the same URL with its arguments for the data.

“Find subdomains of [domain]” / “what TLS certificates exist for [domain]” / “certificate transparency for [host]” / “who issued the cert for [site]” — every certificate ever logged to the public Certificate Transparency logs for a domain and (by default) its subdomains, from crt.sh. AUTHORITATIVE for subdomain discovery and certificate inventory: CAs are required to log every certificate they issue, so this finds hosts that appear in no DNS zone transfer and no web crawl. Returns issuer, validity window, serial number and the full SAN list per certificate, plus a de-duplicated list of every hostname seen. PREFER OVER WEB SEARCH for “what hostnames does this organisation have” and for spotting mis-issued or forgotten certificates.

Parameters

Name	Type	Required	Description
`domain`	string	yes	Domain to search, e.g. “cloudflare.com”. Do not include a scheme or a leading wildcard.
`include_subdomains`	boolean	no	Search “%.domain” (every subdomain) as well as the domain itself. Default true.
`exclude_expired`	boolean	no	Return only certificates that have not passed their notAfter date. Default false (full history).
`limit`	number	no	Maximum certificates to return, 1-1000. Default 100. crt.sh returns newest-first once sorted here.

Example call

Arguments

{
  "domain": "pipeworx.io",
  "exclude_expired": true,
  "limit": 3
}

curl

curl -X POST https://gateway.pipeworx.io/crtsh/mcp \
  -H 'Content-Type: application/json' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"crtsh_search_domain","arguments":{"domain":"pipeworx.io","exclude_expired":true,"limit":3}}}'

TypeScript (@pipeworx/sdk)

import { Pipeworx } from '@pipeworx/sdk';
const pipeworx = new Pipeworx();

const result = await pipeworx.call('crtsh_search_domain', {
  "domain": "pipeworx.io",
  "exclude_expired": true,
  "limit": 3
});

Connect

Add this to your MCP client config, or use one-click install buttons:

{
  "mcpServers": {
    "crtsh": {
      "url": "https://gateway.pipeworx.io/crtsh/mcp"
    }
  }
}

See Getting Started for client-specific install steps.

crtsh_search_domain