Organizations Management - FullHunt API Documentation

All operations require Enterprise access. Mutation permissions are evaluated for the authenticated user in addition to the account gate.

Operations

Operation	Method and path	Limit
Create organization	`POST /enterprise/organizations`	10/minute
Delete organization	`DELETE /enterprise/organizations/{org_id}`	10/minute
Add domain	`POST /enterprise/organizations/{org_id}/domains`	20/minute
Add IP range	`POST /enterprise/organizations/{org_id}/ip-ranges`	20/minute
Delete domain or IP range	`DELETE /enterprise/organizations/{org_id}/domains` or `/ip-ranges`	20/minute
Update asset settings	`PUT /enterprise/organizations/{org_id}/domains/settings` or `/ip-ranges/settings`	20/minute

Create an organization

curl "https://fullhunt.io/api/v1/enterprise/organizations" \
  -X POST \
  -H "X-API-KEY: $FULLHUNT_API_KEY" \
  -H "Content-Type: application/json" \
  --data '{"name":"Customer 123","description":"Authorized external scope"}'

Add an authorized domain

curl "https://fullhunt.io/api/v1/enterprise/organizations/$FULLHUNT_ORG_ID/domains" \
  -X POST \
  -H "X-API-KEY: $FULLHUNT_API_KEY" \
  -H "Content-Type: application/json" \
  --data '{"domain":"your-owned-domain.example"}'

Add an authorized IP range

curl "https://fullhunt.io/api/v1/enterprise/organizations/$FULLHUNT_ORG_ID/ip-ranges" \
  -X POST \
  -H "X-API-KEY: $FULLHUNT_API_KEY" \
  -H "Content-Type: application/json" \
  --data '{"ip_range":"YOUR_AUTHORIZED_PUBLIC_CIDR"}'

Organization deletion cascades to associated account data. Require human confirmation and verify the organization ID before issuing a delete request. Use Enterprise and MSSP Onboarding for tenant mapping, partial-failure recovery, authorized-scope registration, and initial baseline collection.