Choose the Right API

Choose an API from the decision you need to make, not from the similarity of endpoint names.

Domains and organizations

Question	Use	Why
What does FullHunt currently know about one domain?	`GET /domain/{domain}/details`	Domain-level host, service, technology, and registration context
Which subdomains are indexed?	`GET /domain/{domain}/subdomains`	Focused subdomain list
Which indexed hosts belong under a domain?	`GET /intel/domain`	Data Intelligence search with its own result and credit behavior
Which organization is associated with a domain?	`GET /organizations-db/search`	Organization profile search
Which domains are associated with a company?	Nexus Domain Collection	Domain-to-company and company-to-domain research
How should a vendor embed the lookup?	OEM Attack Surface or Organizations Search	Tenant tagging, credits, and audit records

Hosts and IP addresses

Question	Use	Boundary
What is known about one host?	`GET /host/{host}`	Indexed lookup, not a live scan
Which hosts point to an IP?	`GET /intel/ip-to-hosts`	Reverse-host relationship in indexed data
What enrichment is available for an IP?	Nexus IP Lookup	Provider, network, and source-specific context
Is the IP present in the Tor dataset?	Nexus Tor Lookup	Tor observation only, not a malicious verdict
What did a host look like previously?	OEM Historical Hosts Search	OEM-only historical record workflow

Vulnerabilities

Question	Use
What is known about a CVE?	Vulnerability Intelligence Search
Are exploit records available?	Exploits Search
Is there an OSV or GitHub advisory for a package?	Advisories Search
What changed in the last seven days?	Vulnerability Intelligence Feed
Which Enterprise assets have observed findings?	Enterprise Vulnerabilities
Which OEM tenant assets have observed findings?	OEM Vulnerabilities Search

Vulnerability intelligence describes the issue. Enterprise and OEM platform-vulnerability routes describe findings associated with monitored assets. Correlate them; do not treat them as interchangeable.

Scanning

Need	Use
Queue an Enterprise-authorized scan	Enterprise or core attack-surface scan route
Queue and poll an OEM scan	OEM On-Demand Scan plus OEM Scan Status
Retrieve indexed data without scanning	Domain, host, Data Intelligence, Nexus, or OEM search routes

Only OEM exposes a documented scan-status route. All active scans require owned or explicitly authorized targets.

REST or MCP

Use REST for deterministic application integration, explicit pagination, and direct response handling. Use MCP for interactive or agent-assisted research where the client can call named FullHunt tools. The underlying access, credits, data freshness, and safety boundaries still apply.

Get Started

Integration Foundations

Core Attack Surface

Search & Intelligence

Enterprise APIs

Nexus APIs

OEM APIs

Public APIs

Generated API Reference

Agentic AI (MCP)

Domains and organizations

Hosts and IP addresses

Vulnerabilities

Scanning

REST or MCP

​Domains and organizations

​Hosts and IP addresses

​Vulnerabilities

​Scanning

​REST or MCP

Domains and organizations

Hosts and IP addresses

Vulnerabilities

Scanning

REST or MCP