Argus PassiveDNS MCP Tools

These MCP tools let you retrieve Argus PassiveDNS records from the PassiveDNS API.

They support one common task:

• search PassiveDNS records using a structured request

General Notes

• Use these tools when you want the LLM to retrieve PassiveDNS records from Argus APIs.

• If you ask the LLM to search PassiveDNS records, it may first use the PassiveDNS search translator tools to construct and validate the search request and then use the search tool to fetch results.

• Each search tool call returns only one page of results. It does not automatically fetch additional pages.

• When more results may exist, the response includes pagination metadata under page, such as nextOffset, stop, and reason, which the LLM can use if you ask it to continue.

• Search pagination supports 1 to 100 items per page.

• If sorting is involved, the LLM can use the PassiveDNS search translator tools to look up valid values before retrieving results.

Tool: executeSearchArgusPassiveDNS

Purpose

Retrieve Argus PassiveDNS search results for the search criteria the LLM has prepared.

Arguments

Field	Description	Type	Default	Required
request	The full PassiveDNS search definition the LLM builds from your request.	object	None	Yes

request fields

Field	Description	Type	Default	Required
customerID	Limit the search to any of these numeric customer IDs.	array<number>	None	No
query	PassiveDNS query to look up, such as a domain, hostname, or IP address.	string	None	Yes
queryMatchStrategy	How the query should match records. Allowed values: exact, includeSubdomains.	string	exact	No
aggregateResult	Whether matching PassiveDNS records should be aggregated.	boolean	true	No
includeAnonymousResults	Whether anonymous PassiveDNS records should be included.	boolean	true	No
rrClass	Resource record classes to include. Allowed values: in.	array<string>	None	No
rrType	Resource record types to include. Allowed values: a, aaaa, cname, dname, mx, naptr, ns, ptr, rp, soa, srv, txt.	array<string>	None	No
tlp	TLP markings to include. Allowed values: white, green, amber, red.	array<string>	None	No
page	Pagination settings.	object	{ "limit": 25, "offset": 0 }	No
sortBy	Sort order list. Use list order as priority. Prefix with - for descending.	array<string>	None	No

request.page fields

Field	Description	Type	Default	Required
limit	Maximum number of items per page. Accepted range: 1 to 100.	number	25	No
offset	Number of items to skip before returning results. Must be 0 or greater.	number	0	No

Usage notes

• If your request is a search, the LLM may first use generateArgusPassiveDNSSearchQuery to shape and validate the query.

• PassiveDNS search requires a query value, such as a domain, hostname, or IP address.

• Ask explicitly if you want subdomains included; otherwise exact matching is used.

• Ask explicitly if you want unaggregated records or if anonymous records should be excluded.

• If you want more than one page of results, ask the LLM to continue fetching more pages. The tool itself returns one page at a time.

• For descending sorting, the LLM can use a - prefix such as -lastSeen.