OEM Attack Surface - FullHunt API Documentation

OEM Attack Surface operations require Enterprise authentication, the OEM module, and available OEM credits. Credited requests are recorded in OEM audit logs.

Search a domain or IP range

POST /api/v1/oem/attack-surface/search

Field	Required	Values
`type`	Yes	`domain` or `ip_range`
`query`	Yes	Domain, public IP, or public CIDR
`query_tags`	No	Tenant and request attribution object

curl "https://fullhunt.io/api/v1/oem/attack-surface/search" \
  -H "X-API-KEY: $FULLHUNT_API_KEY" \
  -H "Content-Type: application/json" \
  --data '{
    "type": "domain",
    "query": "customer-domain.example",
    "query_tags": {
      "tenant_id": "tenant-123",
      "request_id": "request-456"
    }
  }'

IP ranges are limited to 4,096 addresses. A single IP can be supplied and is normalized to /32. Results can include up to 10,000 indexed hosts and are cached for up to 24 hours.

Retrieve one host or IP

POST /api/v1/oem/attack-surface/host

curl "https://fullhunt.io/api/v1/oem/attack-surface/host" \
  -H "X-API-KEY: $FULLHUNT_API_KEY" \
  -H "Content-Type: application/json" \
  --data '{
    "type": "host",
    "query": "api.customer-domain.example",
    "query_tags": {"tenant_id": "tenant-123"}
  }'

The host route is limited to 60 requests per minute. Search routes without an explicit decorator still enforce OEM credit and service-level controls.

Response use

Store the submitted query, tenant tags, response metadata, host timestamps, ports, products, and certificate fields. The operation retrieves indexed data; it does not initiate a scan. Use OEM On-Demand Scan for authorized active scanning.