check_subdomain_takeover

The check_subdomain_takeover tool is provided by BlackVeil DNS & Email Security Scanner. Install that server in your AI client and the assistant can call it directly.

Servers exposing check_subdomain_takeover

• BlackVeil DNS & Email Security ScannerB · 79HTTP

  From the publisher:Sweep subdomains for dangling CNAMEs pointing to deprovisioned cloud services that could be claimed by an attacker (subdomain takeover vulnerabilities). Detects 16 provider families (AWS S3/CloudFront, Azure Front Door/CDN/Blob/App Service, GCP Cloud Storage, Heroku, GitHub Pages, Vercel, Firebase, Shopify, etc.). Use when asked if subdomains are pointing to deprovisioned cloud services. Pair with

  Parameter	Type	Description
  domain*	string	Domain to check (e.g., example.com).
  subdomains	array	Optional explicit subdomain list (full FQDNs or short labels). When provided (deduped, capped at 1000), this list is swept instead of the 15-name built-in. Source from Certificate-Transparency enumera
  force_refresh	boolean	Bypass cache and run a fresh check. Useful after DNS changes.
  format	string	Output verbosity. Auto-detected if omitted.

  Install BlackVeil DNS & Email Security Scanner →

Tool lists are read from the live servers (or, for packaged servers, from their documentation) each morning, so this reflects what they exposed at the last refresh. Search all tools.