FullHunt API

77 B

Metadata Score Metadata estimate · not endpoint-tested

Visit Official Site Compare Alternatives

Overview

FullHunt is an attack surface intelligence API that lets you discover and explore internet-facing assets — domains, subdomains, and hosts — associated with any target. Security teams use it to monitor their own exposure and identify assets that attackers might target. It is useful for both offensive and defensive security research.

Beginner Tip

Begin by querying your own organization's domain to understand what assets are publicly visible before looking at external targets. The free tier allows a limited number of daily lookups to get you started.

Available Data

The kind of data this API exposes, based on its documentation. We could not call the endpoint to confirm the exact field names.

FullHunt data via REST API

Example Response

Illustrative shape only — we were not able to call this endpoint (it requires credentials or exposes no public sample URL), so the fields below show the kind of data this API returns rather than a recorded response.

JSON Response · Illustrative

{
  "status": "success",
  "data": {
    "result": "Data from FullHunt",
    "description": "Searchable attack surface database of the entire internet",
    "timestamp": "2025-01-15T10:00:00Z"
  }
}

Field Reference

hosts List of discovered hostnames and subdomains for the queried domain.

domain The root domain that was queried.

message Status message or error description returned by the API.

status HTTP-style status code indicating success or failure of the query.

Implementation Example

Calls a real endpoint of this API. Replace any placeholder credentials with your own key.

Request

const url = "https://api-docs.fullhunt.io/";
// Replace headers or query params with the values required by this API.
const response = await fetch(url, {
  headers: {
  "X-API-Key": "YOUR_API_KEY"
  }
});
if (!response.ok) throw new Error(`Request failed: ${response.status}`);
const data = await response.json();
console.log(data);

What Can You Build?

Note: These code examples are AI-generated and unverified. Always refer to the official API documentation for accurate usage.

Common Errors & Troubleshooting

Generated guidance based on this API's documentation, not observed by us. Treat it as a starting point and check against the provider's own error reference.

401 Unauthorized The X-API-KEY header is missing or the key is invalid.

✓ Add the header -H "X-API-KEY: YOUR_API_KEY" to every request using your key from the FullHunt dashboard.

429 Too Many Requests You have exceeded the rate limit for your subscription tier.

✓ Slow down requests and add a delay between calls; consider upgrading your plan for higher limits.

Empty hosts array The domain has no indexed data in FullHunt's database yet.

✓ Try a more well-known domain to test, or submit the target for indexing through the FullHunt portal.

Metadata Score Breakdown

Estimated from metadata — endpoint not independently tested

This score is estimated from observable metadata — HTTPS support, authentication model, declared CORS, and documentation reachability — because the API requires authentication or exposes no publicly testable endpoint. The five-signal breakdown is only shown for live-tested APIs.

Metadata estimate · endpoint not independently tested

How is this scored? →