{
  "info": {
    "name": "Securitytrails — mcp.ai",
    "description": "REST API for the Securitytrails MCP. Set {{apiKey}} to a workspace key (sk_live_…) created at https://mcp.ai/settings/api-keys.",
    "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json"
  },
  "auth": {
    "type": "bearer",
    "bearer": [
      {
        "key": "token",
        "value": "{{apiKey}}",
        "type": "string"
      }
    ]
  },
  "variable": [
    {
      "key": "baseUrl",
      "value": "https://api.mcp.ai/api/securitytrails",
      "type": "string"
    },
    {
      "key": "apiKey",
      "value": "sk_live_...",
      "type": "string"
    }
  ],
  "item": [
    {
      "name": "securitytrails_bulk_static_asset_rules",
      "request": {
        "method": "POST",
        "header": [
          {
            "key": "Content-Type",
            "value": "application/json"
          }
        ],
        "url": {
          "raw": "{{baseUrl}}/bulk/static/asset/rules",
          "host": [
            "{{baseUrl}}"
          ],
          "path": [
            "bulk",
            "static",
            "asset",
            "rules"
          ]
        },
        "description": "Bulk add or remove static asset rules for a SecurityTrails ASI project. Static asset rules define which domains/IPs are included or excluded from the project's monitoring scope. This operation process",
        "body": {
          "mode": "raw",
          "raw": "{\n  \"add\": \"\",\n  \"remove\": \"\",\n  \"project_id\": \"\"\n}",
          "options": {
            "raw": {
              "language": "json"
            }
          }
        }
      }
    },
    {
      "name": "securitytrails_get_company_associated_ips",
      "request": {
        "method": "POST",
        "header": [
          {
            "key": "Content-Type",
            "value": "application/json"
          }
        ],
        "url": {
          "raw": "{{baseUrl}}/get/company/associated/ips",
          "host": [
            "{{baseUrl}}"
          ],
          "path": [
            "get",
            "company",
            "associated",
            "ips"
          ]
        },
        "description": "Tool to retrieve IPs associated with a company domain. Use when you need to find all IP addresses linked to an organization's domain name.",
        "body": {
          "mode": "raw",
          "raw": "{\n  \"domain\": \"\"\n}",
          "options": {
            "raw": {
              "language": "json"
            }
          }
        }
      }
    },
    {
      "name": "securitytrails_get_domain",
      "request": {
        "method": "POST",
        "header": [
          {
            "key": "Content-Type",
            "value": "application/json"
          }
        ],
        "url": {
          "raw": "{{baseUrl}}/get/domain",
          "host": [
            "{{baseUrl}}"
          ],
          "path": [
            "get",
            "domain"
          ]
        },
        "description": "Retrieves comprehensive domain information from SecurityTrails including current DNS records, infrastructure details, and statistics. This tool fetches detailed DNS data (A, AAAA, MX, NS, SOA, TXT rec",
        "body": {
          "mode": "raw",
          "raw": "{\n  \"hostname\": \"\"\n}",
          "options": {
            "raw": {
              "language": "json"
            }
          }
        }
      }
    },
    {
      "name": "securitytrails_get_domain_ssl",
      "request": {
        "method": "POST",
        "header": [
          {
            "key": "Content-Type",
            "value": "application/json"
          }
        ],
        "url": {
          "raw": "{{baseUrl}}/get/domain/ssl",
          "host": [
            "{{baseUrl}}"
          ],
          "path": [
            "get",
            "domain",
            "ssl"
          ]
        },
        "description": "Tool to fetch current and historical SSL certificate details for a hostname. Use when you need to retrieve SSL data after identifying the domain. Coverage limited to certificates indexed by SecurityTr",
        "body": {
          "mode": "raw",
          "raw": "{\n  \"hostname\": \"\"\n}",
          "options": {
            "raw": {
              "language": "json"
            }
          }
        }
      }
    },
    {
      "name": "securitytrails_ip_search_statistics",
      "request": {
        "method": "POST",
        "header": [
          {
            "key": "Content-Type",
            "value": "application/json"
          }
        ],
        "url": {
          "raw": "{{baseUrl}}/ip/search/statistics",
          "host": [
            "{{baseUrl}}"
          ],
          "path": [
            "ip",
            "search",
            "statistics"
          ]
        },
        "description": "Fetch aggregated statistics for IP addresses matching a DSL query. Returns top open ports by frequency, common reverse DNS patterns, and total count. Useful for analyzing IP infrastructure patterns, p",
        "body": {
          "mode": "raw",
          "raw": "{\n  \"query\": \"\"\n}",
          "options": {
            "raw": {
              "language": "json"
            }
          }
        }
      }
    },
    {
      "name": "securitytrails_list_projects",
      "request": {
        "method": "POST",
        "header": [
          {
            "key": "Content-Type",
            "value": "application/json"
          }
        ],
        "url": {
          "raw": "{{baseUrl}}/list/projects",
          "host": [
            "{{baseUrl}}"
          ],
          "path": [
            "list",
            "projects"
          ]
        },
        "description": "Tool to list ASI projects available to the account. Use when you need project IDs for subsequent ASI operations.",
        "body": {
          "mode": "raw",
          "raw": "{}",
          "options": {
            "raw": {
              "language": "json"
            }
          }
        }
      }
    },
    {
      "name": "securitytrails_ping",
      "request": {
        "method": "POST",
        "header": [
          {
            "key": "Content-Type",
            "value": "application/json"
          }
        ],
        "url": {
          "raw": "{{baseUrl}}/ping",
          "host": [
            "{{baseUrl}}"
          ],
          "path": [
            "ping"
          ]
        },
        "description": "Tool to test authentication and connectivity with the SecurityTrails API. Use after configuring API key.",
        "body": {
          "mode": "raw",
          "raw": "{}",
          "options": {
            "raw": {
              "language": "json"
            }
          }
        }
      }
    },
    {
      "name": "securitytrails_scroll",
      "request": {
        "method": "POST",
        "header": [
          {
            "key": "Content-Type",
            "value": "application/json"
          }
        ],
        "url": {
          "raw": "{{baseUrl}}/scroll",
          "host": [
            "{{baseUrl}}"
          ],
          "path": [
            "scroll"
          ]
        },
        "description": "Tool to continue scrolling through DSL search results. Use after receiving a scroll_id from SECURITYTRAILS_SEARCH_IPS or SECURITYTRAILS_SQL_API_EXECUTE_QUERY to fetch the next batch of data. Call iter",
        "body": {
          "mode": "raw",
          "raw": "{\n  \"scroll_id\": \"\"\n}",
          "options": {
            "raw": {
              "language": "json"
            }
          }
        }
      }
    },
    {
      "name": "securitytrails_search_ips",
      "request": {
        "method": "POST",
        "header": [
          {
            "key": "Content-Type",
            "value": "application/json"
          }
        ],
        "url": {
          "raw": "{{baseUrl}}/search/ips",
          "host": [
            "{{baseUrl}}"
          ],
          "path": [
            "search",
            "ips"
          ]
        },
        "description": "Tool to search IP addresses via SecurityTrails DSL. Use when you need to filter IPs with custom DSL queries. Results are paginated; use SecurityTrails scroll mechanisms for large result sets to avoid ",
        "body": {
          "mode": "raw",
          "raw": "{\n  \"page\": 0,\n  \"query\": \"\"\n}",
          "options": {
            "raw": {
              "language": "json"
            }
          }
        }
      }
    },
    {
      "name": "securitytrails_sql_api_execute_query",
      "request": {
        "method": "POST",
        "header": [
          {
            "key": "Content-Type",
            "value": "application/json"
          }
        ],
        "url": {
          "raw": "{{baseUrl}}/sql/api/execute/query",
          "host": [
            "{{baseUrl}}"
          ],
          "path": [
            "sql",
            "api",
            "execute",
            "query"
          ]
        },
        "description": "Execute SQL-like queries against SecurityTrails data. Query the 'hosts' table for domain/DNS information or the 'ips' table for IP address/ASN/port data. Returns up to 100 records per request with a s",
        "body": {
          "mode": "raw",
          "raw": "{\n  \"query\": \"\"\n}",
          "options": {
            "raw": {
              "language": "json"
            }
          }
        }
      }
    },
    {
      "name": "securitytrails_sql_api_scroll_results",
      "request": {
        "method": "POST",
        "header": [
          {
            "key": "Content-Type",
            "value": "application/json"
          }
        ],
        "url": {
          "raw": "{{baseUrl}}/sql/api/scroll/results",
          "host": [
            "{{baseUrl}}"
          ],
          "path": [
            "sql",
            "api",
            "scroll",
            "results"
          ]
        },
        "description": "Tool to fetch next page of SQL query results. Use after obtaining scroll_id from initial SQL API response.",
        "body": {
          "mode": "raw",
          "raw": "{\n  \"scroll_id\": \"\"\n}",
          "options": {
            "raw": {
              "language": "json"
            }
          }
        }
      }
    },
    {
      "name": "securitytrails_temp_scrape_securitytrails_usage",
      "request": {
        "method": "POST",
        "header": [
          {
            "key": "Content-Type",
            "value": "application/json"
          }
        ],
        "url": {
          "raw": "{{baseUrl}}/temp/scrape/securitytrails/usage",
          "host": [
            "{{baseUrl}}"
          ],
          "path": [
            "temp",
            "scrape",
            "securitytrails",
            "usage"
          ]
        },
        "description": "Retrieve account usage information from the SecurityTrails API. This action fetches the current monthly usage and allowed monthly usage limits for your SecurityTrails API account. Use this to monitor ",
        "body": {
          "mode": "raw",
          "raw": "{}",
          "options": {
            "raw": {
              "language": "json"
            }
          }
        }
      }
    }
  ]
}