Model Context Protocol

Give your agent
the scent.

ulv.dk is also a remote MCP server. Point Claude, Cursor or any MCP-capable client at the endpoint below and your agent gets a wolf of its own. No key, no account, no leash. It hunts public log records and nothing else.

Endpoint · Streamable HTTP

https://ulv.dk/mcp

Connect a client

Claude Code

claude mcp add --transport http ulv https://ulv.dk/mcp

Claude Desktop · Settings → Connectors → Add custom connector

https://ulv.dk/mcp

Cursor · ~/.cursor/mcp.json

{
  "mcpServers": {
    "ulv": { "url": "https://ulv.dk/mcp" }
  }
}

Tools

Four tools mirror the site itself: start from a domain, follow a fingerprint.

get-domain-certificatesdomain: Every certificate issued for a domain and its subdomains — up to 1,000 log entries, deduplicated by fingerprint, newest first.
get-domain-hostnamesdomain: Every hostname the logs expose for a domain. The fast way to map subdomains.
get-certificatehash: One certificate by SHA-256 fingerprint, fully parsed: issuer, subject, validity, public key, extensions.
get-certificate-derhash: The raw DER bytes, base64-encoded — for offline analysis with openssl and friends.

Prefer plain HTTP? The same data is served by the REST API: /api/domain/{domain}/certificates, /api/domain/{domain}/hostnames and /api/cert/{hash}.