{"uid":"cap_LwR49OdUXIY8rnLj98wOo","slug":"tinstop-domain-subdomain-enumeration-1dbf93dc","name":"Tinstop Domain Subdomain Enumeration","description":"Tinstop is a machine-payable Website Intelligence API for domain security and performance audits: DNS, SSL/TLS, HTTP security headers, SPF/DKIM/DMARC email authentication, and Google PageSpeed. Pay per call with x402 using USDC on Base. No accounts or API keys.","url":"https://tinstop.com/v1/domain/subdomains","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"limit":{"type":"integer","description":"Max hosts to return after discovery."},"domain":{"type":"string","description":"Apex domain to enumerate."}}},"responseSchema":{"type":"object","title":"Response Domain Subdomains V1 Domain Subdomains Post","additionalProperties":true},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.02","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"registry","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.02/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_AkMzeuV-LiUHJ-kaZmr3M","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.02","costPer":"request","priority":0,"asset":null,"unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Enumerates and discovers subdomains for a given apex domain, returning a list of discovered hosts up to a configurable limit.","exampleAgentPrompt":"Can you enumerate all the subdomains for example.com and give me up to 50 hosts?","exampleUseCases":[{"title":"Security audit attack surface mapping","prompt":"I need to map the full subdomain attack surface for acmecorp.com — can you discover all subdomains and return up to 100 hosts so I can see what's exposed?"},{"title":"Forgotten subdomain discovery","prompt":"Can you enumerate the subdomains of myoldstartup.io and give me up to 20 results? I want to see if there are any old or forgotten hosts still running."},{"title":"Competitive domain intelligence","prompt":"What subdomains does competitor.com have? Pull up to 50 hosts so I can understand how they've structured their web presence."}],"resultDescription":"Returns a list of discovered subdomain hostnames (up to the specified limit) belonging to the given apex domain, including any additional metadata about each host that is available.","failureModes":["Invalid or non-existent domain returns empty results or error","Payment failure via x402 if USDC balance is insufficient","Rate limiting if too many requests are made in quick succession","Very large domains with thousands of subdomains may be truncated to the requested limit","Private or internal subdomains not resolvable via public DNS will not appear"],"whenToPreferThis":"Choose this endpoint when you need fast, pay-per-call subdomain enumeration without setting up an account or managing API keys. It is ideal for one-off reconnaissance tasks, security audits, or agent workflows that need on-demand subdomain discovery billed in micro-payments via USDC on Base using x402.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T12:48:55.507Z","isFirstParty":false}