Search FOFA assets with /api/v1/search/all. Query is encoded as qbase64. Supported fields include: ip, port, protocol, country, country_name, region, city, longitude, latitude, asn, org, host, domain, os, server, icp, title, jarm, header, banner, cert, base_protocol, link, cert.issuer.org, cert.issuer.cn, cert.subject.org, cert.subject.cn, tls.ja3s, tls.version, cert.sn, cert.not_before, cert.not_after, cert.domain, status_code, header_hash, banner_hash, banner_fid, cname, lastupdatetime, product, product_category, product.version, icon_hash, cert.is_valid, cname_domain, body, cert.is_match, cert.is_equal, icon, fid, structinfo.

Search FOFA assets with /api/v1/search/next. Use returned next value for stable continuous pagination over a large result set.

Aggregate FOFA search results with /api/v1/search/stats. Calls are throttled to one request every 5 seconds in this MCP process. Supported fields: protocol, domain, port, title, os, server, country, asn, org, asset_type, fid, icp.

Get FOFA host aggregation data with /api/v1/host/{host}. Calls are throttled to one request every 1 second in this MCP process.

Get FOFA account status, quota, and membership information with /api/v1/info/my.

Get Quake user details, quota, token, and role information with /api/v3/user/info.

Get Quake service fields usable in include/exclude with /api/v3/filterable/field/quake_service. Examples: components.product_level, components.product_catalog, location.country_cn, domain, service.http.favicon.hash, service.http.host, components.product_vendor, location.city_en, service.http.title, service.name, time, location.isp, transport, location.province_en, components.product_name_cn, asn, location.city_cn, location.province_cn, service.http.status_code, service.http.infomation.mail, org, service.http.icp.main_licence.unit, location.district_cn, service.cert, service.http.server, hostname, service.http.body, components.product_type, location.district_en, service.http.favicon.data, ip, service.http.icp.licence, components.version, location.country_en, port, service.response.

Run real-time Quake service search with /api/v3/search/quake_service. Use this for small result sets; use quake_service_scroll for deep pagination.

Run deep-pagination Quake service search with /api/v3/scroll/quake_service. Use meta.pagination_id from the response as pagination_id for the next page.

Backward-compatible alias for quake_service_scroll.

Get Quake service aggregation fields with /api/v3/aggregation/quake_service. Examples: ip, port, service, product, os, asn, org, title, server, app, catalog, type, level, vendor, isp, status_code, powered_by, meta_keywords, page_type, icp, app_and_version, service_and_version, unique_ip, unique_domain, unique_port, unique_product, unique_asn, unique_org, unique_isp, unique_title, unique_server, unique_app, unique_catalog, unique_type, unique_level, unique_vendor, unique_country, unique_province, unique_city, province, province_cn, country, country_cn, country_code, city, city_cn, district, district_cn, province_of_china.

Run Quake service aggregation query with /api/v3/aggregation/quake_service.

Search Hunter personal API /openApi/search. Personal fields: ip,port,domain,ip_tag,url,web_title,is_risk_protocol,protocol,base_protocol,status_code,os,company,number,icp_exception,country,province,city,is_web,isp,as_org,cert_sha256,ssl_certificate,component,asset_tag,updated_at,header,header_server,banner.

Create a Hunter personal batch search task with query or CSV file upload.

Get Hunter personal batch task progress.

Download Hunter personal batch task export file to output_path.

Get Hunter personal account quota and account information.

Search Hunter enterprise API /openApi/search. Enterprise fields: ip,port,domain,ip_tag,url,web_title,is_risk_protocol,protocol,base_protocol,status_code,os,company,number,icp_exception,country,province,city,is_web,isp,as_org,cert_sha256,ssl_certificate,component,asset_tag,updated_at,header,header_server,banner,whois,body,vul_list.

Create a Hunter enterprise batch search task with query or CSV file upload.

Get Hunter enterprise batch task progress.

Download Hunter enterprise batch task export file to output_path.

Pull Hunter enterprise batch task results as JSON. Enterprise-only.

Get Hunter enterprise or sub-account quota and account information.

Get paid-account subscription and points information with POST /v2/userinfo.

Search ZoomEye paid-account assets with POST /v2/search. Provide a raw query for automatic Base64 encoding, or pass qbase64 directly. Free and legacy search APIs are not supported.

Search DayDayMap assets with POST /api/v1/raymap/search/all. Query is automatically Base64-encoded for the keyword parameter. Strings in queries must use English double quotes and are case-insensitive. Supported return fields: ip, is_ipv6, is_website, port, protocol, url, continent, country, country_code, province, city, postal_code, asn, asn_org, longitude, latitude, isp, domain, icp_reg_name, industry, title, icon_md5, banner, header, body, os, device_type, manufacturer, server, lang, device, product, service, tags, time_stamp, cert, cert_selfsigned, SSL. Query syntax categories: IP: ip, ip.port, ip.isp, ip.os_family, ip.os, ip.tag, ip.industry, is_ipv6; 域名: domain, domain.root, is_domain; 地理位置: ip.country, ip.province, ip.city, ip.district; ICP 备案: icp.number, icp.name, icp.name_prefix, icp.webname; AS 域: asn.number, asn.org; WEB: is_web, web.server, web.status_code, web.header, web.title, web.lang, web.body, web.icon; 协议: protocol.transport, protocol.service, protocol.banner; 应用: app.name; 组件: product; 设备: device.name, device.type, device.type_sub, brand, model, manufacturer; 证书: cert.issuer, cert.subject, cert.sn, cert.org, cert.md5, cert.is_expired, cert.is_trust, cert.startdate, cert.enddate; 时间: time; 漏洞: vul.cve, vul.dvb; 资产归属: org.name, org.name_prefix. Logical AND uses &&. Maximum 10,000 results total (page x page_size <= 10000).