Pulls DNS, SSL, and infrastructure detail for a domain, queries the hosts and ips tables directly, and keeps ASI asset scope current.
12actions available
Every action runs live through MCP. Nothing to build, nothing to maintain.
Ayro retrieves comprehensive domain intelligence including DNS records and infrastructure details. You assess whether a website is legitimate or identify security issues.
Ayro searches IP addresses using advanced filters to find infrastructure associated with a domain. Your team investigates suspicious traffic and maps network infrastructure.
Ayro identifies all IP addresses associated with a company domain to understand their infrastructure. You quickly map network topology and spot rogue infrastructure.
Each card is one request a support team gets, and the Securitytrails actions Ayro runs to close it.
Ayro retrieves current DNS records, infrastructure detail, and statistics for a domain, reads its current and historical SSL certificates, and lists the IPs linked to that organisation.
Ayro runs a DSL query across IP addresses, reads the aggregate picture including top open ports and common reverse DNS patterns, and pages through the matches.
Ayro executes a SQL-style query against the hosts table for domain and DNS data or the ips table for address detail, then pages through the result set.
Ayro lists the ASI projects on the account and adds or removes static asset rules in bulk, so the domains and IPs a project watches match what the organisation actually owns.
How it works
Connect once, then just ask. There is no workflow builder to learn and nothing to maintain — Ayro reads the Securitytrails actions it has and picks the ones a request needs.
Authorize the Securitytrails account your team already uses — one consent screen, no API keys, no mapping tables. Ayro can only do what you granted that account, and you can disconnect it at any time.
Describe the job the way you would hand it to a teammate. Ayro maps it to the Securitytrails actions that close it and chains as many as the request needs.
The agent runs the actions inside the conversation the customer is already in, so nobody copies data between tabs and your team can take over at any point.
Get started freeSecuritytrails · Ayro
What can you do in Securitytrails without me setting anything up?
These, right away:
Great, let's start with the first one.
FAQ
Setup, permissions, and the limits of what Ayro can do inside Securitytrails.
Only the scope of an ASI project. Bulk Static Asset Rules adds or removes the domains and IPs a project includes or excludes; every other action in the toolkit reads data. Nothing here alters DNS, certificates, or any record outside your own project configuration.
All 12 actions your agent can call on Securitytrails, straight from the live MCP connection.
Bulk add or remove static asset rules for a SecurityTrails ASI project.
Retrieve IPs associated with a company domain.
Retrieves comprehensive domain information from SecurityTrails including current DNS records, infrastructure details, and statistics.
Fetch current and historical SSL certificate details for a hostname.
Fetch aggregated statistics for IP addresses matching a DSL query.
List ASI projects available to the account.
Test authentication and connectivity with the SecurityTrails API.
Continue scrolling through DSL search results.
Search IP addresses via SecurityTrails DSL.
Execute SQL-like queries against SecurityTrails data.
Fetch next page of SQL query results.
Retrieve account usage information from the SecurityTrails API.
Same connection, same setup. Pick the next one your team already uses.
Reads funnel, retention, and revenue metrics on request, annotates releases on the chart, updates cohort membership, and files GDPR deletions.
Creates Databox data sources and datasets, pushes records into them, verifies each ingestion landed, and removes what is no longer feeding a dashboard.
Pulls clicks, impressions, and position data from a live property, inspects URLs that will not index, and submits or audits sitemaps.
Pulls survey responses for a form or report, resolves the fields behind them, and reports where and when a feedback form is shown.
Reads and updates trip status, starts and completes trips, maintains geofences and beacons, and turns partial addresses into verified coordinates.
Reads form responses and the questions behind them, builds and edits forms from block definitions, and wires submissions out through webhooks.

Authorize the account and your agent has all 12 actions from the first conversation.
