OEM APIs are server-to-server operations for security vendors and other approved partners. They add OEM credits, tenant-defined query tags, and account-scoped audit records to FullHunt data and scan workflows.
OEM routes require Enterprise authentication and the OEM module. Contact FullHunt to discuss access.

API groups

Request attribution

Add stable tenant and request identifiers to every OEM request:
Do not include customer names, API keys, passwords, or unnecessary personal data in query_tags. The audit log stores the tags and request parameters.

Operational limits

Some credited search routes use service-level defaults rather than an explicit route decorator. Design against the response status and partner agreement, not an assumed universal limit.

Integration sequence

  1. Verify account and module fields through OEM account credits.
  2. Define required query tags and reject unattributed requests.
  3. Set request, credit, retry, and pagination budgets.
  4. Preserve response timestamps and source fields.
  5. Reconcile usage from audit logs.
  6. Apply authorized-scope checks before active scans.
Use OEM Tenant Metering and OEM On-Demand Scan for complete implementations.