M
API Matrix

FullHunt API

Security / API Key Intermediate HTTPS
Varies by plan (check documentation)
77 Score
Grade B
Visit Official Site Compare Alternatives

Overview

FullHunt is an attack surface intelligence API that lets you discover and explore internet-facing assets — domains, subdomains, and hosts — associated with any target. Security teams use it to monitor their own exposure and identify assets that attackers might target. It is useful for both offensive and defensive security research.

💡

Beginner Tip

Begin by querying your own organization's domain to understand what assets are publicly visible before looking at external targets. The free tier allows a limited number of daily lookups to get you started.

Available Data

FullHunt data via REST API
JSON-formatted response data
Requires API key authentication

Example Response

JSON Response 
{
  "status": "success",
  "data": {
    "result": "Data from FullHunt",
    "description": "Searchable attack surface database of the entire internet",
    "timestamp": "2025-01-15T10:00:00Z"
  }
}

Field Reference

hosts List of discovered hostnames and subdomains for the queried domain.
domain The root domain that was queried.
message Status message or error description returned by the API.
status HTTP-style status code indicating success or failure of the query.

Implementation Example 

const url = "https://api-docs.fullhunt.io/";
// Replace headers or query params with the values required by this API.
const response = await fetch(url, {
  headers: {
  "X-API-Key": "YOUR_API_KEY"
  }
});
if (!response.ok) throw new Error(`Request failed: ${response.status}`);
const data = await response.json();
console.log(data);

What Can You Build?

Note: These code examples are AI-generated and unverified. Always refer to the official API documentation for accurate usage.

Common Errors & Troubleshooting

401 Unauthorized The X-API-KEY header is missing or the key is invalid.
✓ Add the header -H "X-API-KEY: YOUR_API_KEY" to every request using your key from the FullHunt dashboard.
429 Too Many Requests You have exceeded the rate limit for your subscription tier.
✓ Slow down requests and add a delay between calls; consider upgrading your plan for higher limits.
Empty hosts array The domain has no indexed data in FullHunt's database yet.
✓ Try a more well-known domain to test, or submit the target for indexing through the FullHunt portal.

Matrix Score Breakdown

🌐 Reachability 30/30
⚡ Speed 10/20
🔒 Security 15/15
🛠 Developer XP 12/20
✓ Reliability 10/15

Partially tested on Apr 5, 2026

Technical Specifications

Auth API Key
HTTPS REQUIRED
CORS UNKNOWN
Category Security
Difficulty Intermediate
Verified: 2026-04-07

Similar APIs

View All →

Application Environment Verification

82

Application Environment Verification (AEV) is an Android library and API from FingerprintJS that checks whether a user device is safe to use.

API Key Intermediate HTTPS

BinaryEdge

82

BinaryEdge is a cybersecurity platform that continuously scans the entire internet and exposes the results through its API.

API Key Intermediate HTTPS

Botd

82

Botd is an open-source JavaScript library and API from FingerprintJS that detects whether a web visitor is a bot or a real human browser.

API Key Intermediate HTTPS

Bugcrowd

72

The Bugcrowd API gives you programmatic access to your organization's bug bounty program data, including submissions, rewards, and researcher profiles.

API Key Intermediate HTTPS

Censys

44

Censys is an internet-wide scanning platform that lets you search for any internet-connected host, device, or certificate using its REST API.

API Key Intermediate HTTPS