{"uid":"cap_Nk0PNCnFdiWXWsqP2CjIH","slug":"subdomain-finder-change-watch-45088a03","name":"Subdomain Finder Change Watch","description":"Change watch for subdomain finder: runs the check and compares it with the result from your previous call for the same domain (kept 90 days), returning the current answer, changed true/false, exactly which fields changed with before/after values, and when it was last seen. Call it on a schedule to be told when subdomain finder from certificate-transparency logs changes. $0.02 per check.","url":"https://intel.rallylive.ca/watch/subdomains?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.02","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.02/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_rTLAhI6_slN_8WQAZ1i1X","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.02","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Monitors certificate-transparency-based subdomain discovery for a domain and returns whether results have changed since the last check, with before/after field diffs.","exampleAgentPrompt":"Keep an eye on example.com's subdomains using certificate transparency logs — let me know whenever new ones appear or existing ones disappear compared to the last check.","exampleUseCases":[{"title":"Security alert on new subdomains","prompt":"Set up a recurring check on acmecorp.com so I get notified whenever a new subdomain shows up in certificate transparency logs that wasn't there before."},{"title":"Competitor subdomain growth tracking","prompt":"Every week, check competitor.com for any new subdomains using CT logs and tell me exactly what's been added or removed since the previous scan."},{"title":"Attack surface change detection","prompt":"Run a subdomain watch on mybrand.io and tell me if anything has changed — I want to see which specific subdomains are new or gone, with before and after values."}],"resultDescription":"Returns the current list of subdomains found via certificate-transparency logs, a boolean 'changed' field indicating whether results differ from the previous call for the same domain, a field-level diff showing exactly which entries were added or removed with before/after values, and a timestamp of when the data was last seen. Previous results are retained for 90 days.","failureModes":["Domain not provided or malformed — missing required query parameter","No previous result stored (first call always returns changed=false or baseline)","Certificate transparency log sources temporarily unavailable — may return stale or empty results","Domain has no CT log entries — returns empty subdomain list","Result retention window exceeded 90 days — previous baseline lost, treated as first call"],"whenToPreferThis":"Choose this endpoint when you need scheduled, differential monitoring of subdomains discovered via certificate transparency logs — specifically when you care about what changed between checks rather than just retrieving the current list. It is ideal for security automation pipelines, attack surface management workflows, or competitive intelligence agents that need to react to changes without storing their own state. Prefer this over a raw subdomain lookup when you need built-in diffing, change detection, and 90-day result history.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-19T18:49:11.373Z","isFirstParty":false,"canonicalSlug":"subdomain-finder-change-watch-45088a03"}