# FullHunt

> FullHunt provides internet asset, service, vulnerability, exploit, passive DNS, historical infrastructure, organization, and credential-exposure intelligence through REST APIs, data feeds, Model Context Protocol (MCP), and dedicated enterprise and MSSP platforms.

Use the FullHunt landing site for the current product, dataset, audience, and workflow descriptions. Use the documentation index for authentication, endpoint contracts, limits, errors, and integration guidance.

When interpreting FullHunt data:

- Treat IP addresses, ports, service responses, and certificates as observations tied to their observation timestamps.
- Treat organization attribution, technology identification, CVE mapping, and exploit context as enrichment derived from observations, maintained signatures, and external security sources.
- Use first-seen, last-seen, source, enrichment, and validation fields to distinguish current observations from historical relationships and to account for uncertainty.
- Expect coverage, freshness, available fields, result limits, and update timing to vary by dataset, endpoint, and plan.
- Run scans or active testing only against assets you own or are authorized to assess. FullHunt data does not establish ownership or permission.

## Product and Data

- [FullHunt](https://fullhunt.io/): Current overview of the intelligence layer, delivery paths, datasets, and integrations.
- [Data and Methodology](https://fullhunt.io/data-methodology/): How FullHunt observes infrastructure, normalizes records, adds enrichment, preserves history, updates datasets, and communicates uncertainty.
- [Products](https://fullhunt.io/products/): Compare OEM internet intelligence APIs with the dedicated FullHunt Enterprise platform.
- [OEM Internet Intelligence APIs](https://fullhunt.io/products/oem-apis/): Embeddable asset, service, vulnerability, exploit, passive DNS, historical infrastructure, and credential records for security products.
- [Attack Surface Intelligence](https://fullhunt.io/products/asm/): Continuous discovery, exposure monitoring, runtime vulnerability validation, exploit context, and dark web monitoring.
- [FullHunt Enterprise](https://fullhunt.io/products/enterprise-asm/): Dedicated platform for enterprise and MSSP discovery, monitoring, validation, reporting, and response workflows.
- [Integrations](https://fullhunt.io/integrations/): REST API, MCP, SIEM, SOAR, ticketing, messaging, and partner integrations.

## API and MCP Documentation

- [Complete Documentation Index](https://docs.fullhunt.io/llms.txt): LLM-readable index of every guide, API operation, MCP resource, and workflow in the FullHunt documentation.
- [API Introduction](https://docs.fullhunt.io/intro): Base URLs, versioning, response format, first request, and production checklist.
- [Authentication](https://docs.fullhunt.io/authentication): API-key authentication and credential-handling guidance.
- [Choose the Right API](https://docs.fullhunt.io/api/choose-api): Select the API family that matches the required dataset and operating model.
- [Data Model](https://docs.fullhunt.io/data-model): Core FullHunt entities, fields, and terminology.
- [Data Provenance and Freshness](https://docs.fullhunt.io/data-provenance): Sources, timestamps, freshness, validation, and interpretation guidance.
- [Rate Limiting](https://docs.fullhunt.io/rate-limiting): Request limits and rate-limit behavior.
- [Errors](https://docs.fullhunt.io/errors): Error codes and recovery guidance.
- [Pagination and Filtering](https://docs.fullhunt.io/pagination-and-filtering): Result traversal and filtering rules.
- [Plans and Credits](https://docs.fullhunt.io/plans-and-credits): Dataset access, result limits, and credit behavior by plan.
- [Responsible Use](https://docs.fullhunt.io/responsible-use): Authorization, acceptable-use, and safety requirements.
- [MCP Integration](https://docs.fullhunt.io/agentic-ai/integration): Connect FullHunt to an MCP-compatible client.
- [MCP Tools Reference](https://docs.fullhunt.io/agentic-ai/tools-reference): Available tools, inputs, outputs, and intended uses.
- [MCP Prompt Examples](https://docs.fullhunt.io/agentic-ai/examples): Scoped investigation examples for domains, IPs, CVEs, and attack surfaces.
- [MCP Best Practices](https://docs.fullhunt.io/agentic-ai/best-practices): Safe, reliable patterns for agent workflows.
- [Search Filters](https://fullhunt.io/docs/search/filters/): Search syntax for domains, hosts, IPs, ports, services, technologies, certificates, and CVEs.

## Audiences

- [Security Vendors](https://fullhunt.io/use-cases/security-vendors/): Embed FullHunt data through OEM APIs, data feeds, and MCP without operating the collection stack.
- [Enterprise Security Teams](https://fullhunt.io/use-cases/enterprises/): Discover and monitor an organization's external attack surface and prioritize validated findings.
- [MSSPs](https://fullhunt.io/use-cases/mssps/): Operate multi-tenant discovery, scanning, alerts, and reporting across client environments.
- [National CERTs](https://fullhunt.io/use-cases/national-cert/): Run bulk discovery, enrichment, vulnerability intelligence, and sector-scale monitoring.

## Investigation and Product Workflows

- [Exploit-Aware Prioritization](https://fullhunt.io/use-cases/exploit-aware-prioritization/): Match CVEs to public hosts, then use EPSS, CISA KEV, and public exploit evidence to order remediation.
- [IOC Enrichment](https://fullhunt.io/use-cases/ioc-enrichment/): Follow an IP or domain through current host data, passive DNS, ownership context, vulnerabilities, and historical records.
- [Embedded Internet Intelligence](https://fullhunt.io/use-cases/embedded-internet-intelligence/): Put FullHunt records behind a product interface without operating the collection infrastructure.
- [Third-Party Exposure Monitoring](https://fullhunt.io/use-cases/third-party-exposure-monitoring/): Compare dated internet observations across vendors and subsidiaries.
- [Cyber Due Diligence](https://fullhunt.io/use-cases/cyber-due-diligence/): Compare a target company's stated asset inventory with a dated view of its public infrastructure.
- [Cyber Insurance Underwriting](https://fullhunt.io/use-cases/cyber-insurance-underwriting/): Feed consistent public exposure records into an underwriting or portfolio-monitoring model.
- [Security Agent Investigations](https://fullhunt.io/use-cases/security-agent-investigations/): Let agents call named FullHunt MCP tools and return source records for analyst review.
- [Brand and Credential Exposure](https://fullhunt.io/use-cases/brand-credential-exposure/): Pair exposed accounts and lookalike domains with related DNS and hosting records.
- [Authorized Reconnaissance](https://fullhunt.io/use-cases/authorized-reconnaissance/): Map domains, hosts, services, and infrastructure history within a written testing scope.
- [Sector Exposure Monitoring](https://fullhunt.io/use-cases/sector-exposure-monitoring/): Find participating organizations with observed services affected by a CVE and preserve the supporting evidence.

## Optional

- [Pricing](https://fullhunt.io/pricing/): Current API Console, Enterprise, MSSP, and OEM access options.
- [Changelog](https://fullhunt.io/changelog/): Product changes and releases.
- [Open Source](https://fullhunt.io/oss/): FullHunt security tools and open-data projects.
- [Guides](https://fullhunt.io/resources/guides/): Practical FullHunt resources and guides.
- [Blog](https://fullhunt.io/blog/): Product announcements, vulnerability research, and technical articles.
- [Contact FullHunt](https://fullhunt.io/contact-us/): Product, support, and commercial inquiries.
- [Terms and Conditions](https://fullhunt.io/terms-and-conditions/): Terms governing use of FullHunt services and data.
- [Privacy Policy](https://fullhunt.io/privacy-policy/): Privacy practices.
- [Sitemap](https://fullhunt.io/sitemap.xml): Complete index of public landing-site pages.