Data Intelligence APIs

Data Intelligence routes share this request pattern:

GET /api/v1/intel/{route_type}

They require API-key authentication, deduct one credit per successful request, and are limited to 60 requests per minute. Keys that belong to an Enterprise account also need the Data Intelligence module; without it the route returns 403 with “Data Intelligence module is not enabled”. Community keys are not module-gated. Results are returned in one response (up to 100, or 10,000 for Enterprise accounts); page is currently ignored.

Route types

`route_type`	Required query parameters	Result
`host`	`host`	One indexed host search
`tag`	`tag`	Hosts with a service tag
`web-tech`	`tech`	Hosts with a detected web technology
`product`	`product`	Hosts with a detected product
`domain`	`domain`	Hosts beneath a domain
`ip-to-hosts`	`ip`	Hosts associated with one IP
`asn-to-hosts`	`asn`	Hosts in an Autonomous System Number
`asn-to-virtual-hosts`	`asn`	Virtual hosts associated with an Autonomous System Number
`ip-range-to-hosts`	`ip_start`, `ip_end`	Hosts inside an inclusive address range
`dns-mx-to-hosts`	`dns_mx`	Hosts sharing a mail exchanger record
`dns-ns-to-hosts`	`dns_ns`	Hosts sharing a nameserver record

Examples

Technology search

curl --get "https://fullhunt.io/api/v1/intel/web-tech" \
  -H "X-API-KEY: $FULLHUNT_API_KEY" \
  --data-urlencode "tech=React"

Reverse host search

curl --get "https://fullhunt.io/api/v1/intel/ip-to-hosts" \
  -H "X-API-KEY: $FULLHUNT_API_KEY" \
  --data-urlencode "ip=192.0.2.10"

ASN search

curl --get "https://fullhunt.io/api/v1/intel/asn-to-hosts" \
  -H "X-API-KEY: $FULLHUNT_API_KEY" \
  --data-urlencode "asn=64496"

The example IP and ASN values are reserved for documentation.

Interpretation

Shared infrastructure does not prove common ownership.
A product or technology match does not prove a vulnerability.
Preserve query parameters, page, result metadata, and collection timestamps.
Cache results only as long as your workflow’s freshness requirement allows.

Use Web Technologies Catalogue and Detected Products Catalogue for query-name discovery. The tag route takes a normalized value, not a product name. Use the Product Tags Catalogue to translate between the two.

Get Started

Integration Foundations

Core Attack Surface

Search & Intelligence

Enterprise APIs

Nexus APIs

OEM APIs

Public APIs

Generated API Reference

Agentic AI (MCP)

Route types

Examples

Interpretation

​Route types

​Examples

​Interpretation

Route types

Examples

Interpretation