{"uid":"cap_3g6m3taWq0C6tMsvExWjO","slug":"certificate-transparency-subdomain-lookup-37b8863a","name":"Certificate Transparency Subdomain Lookup","description":"Certificate transparency subdomains (crt.sh). ?domain=example.com","url":"https://pyfile-agent.taile3ff35.ts.net:10000/data/ct","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{"domain":{"type":"string"}}}}},"output":{"type":"object"}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.003","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.003/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_5xcQRapOKaVPevNrH8sU5","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.003","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Queries crt.sh to return all subdomains discovered for a given domain via certificate transparency logs","exampleAgentPrompt":"Can you pull all the subdomains that have been logged for example.com using certificate transparency records?","exampleUseCases":[{"title":"Security audit subdomain discovery","prompt":"Find all subdomains that have ever been registered for acmecorp.com by checking certificate transparency logs — I'm doing a security audit and want to see what's exposed."},{"title":"Competitive domain reconnaissance","prompt":"What subdomains show up in certificate transparency logs for competitor.com? I want to understand what services and infrastructure they've deployed."},{"title":"Certificate exposure check for own domain","prompt":"Check crt.sh and tell me every subdomain that's been issued an SSL certificate under mybusiness.com so I can make sure nothing unexpected was registered."}],"resultDescription":"Returns a list of subdomains (hostnames) discovered for the queried domain from certificate transparency logs aggregated by crt.sh, potentially including historical and currently active subdomain entries tied to issued SSL/TLS certificates.","failureModes":["Missing or empty 'domain' query parameter returns an error or empty result","Invalid or nonexistent domain returns empty subdomain list","crt.sh upstream timeout or unavailability causes request failure","Rate limiting on crt.sh may cause intermittent failures","Very large domains with thousands of certificates may return truncated results"],"whenToPreferThis":"Use this endpoint when you need passive subdomain enumeration for a domain without sending any traffic to the target — certificate transparency logs are public and comprehensive. Prefer this over active DNS scanning when stealth or read-only reconnaissance is required. It is especially useful for security audits, asset discovery, and verifying your own domain's certificate issuance history.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T13:10:40.322Z","isFirstParty":false}