PHP2ShellHOTAI Search
PricingSALE
MembershipDatasets
PartnersBugBounty RadarSKILLMCPCVE Feed
mixed_searchfile_searchicon_searchsearch
newSearch Description | SearchTool

ZoomEye Agent Docs

Connect AI agents to ZoomEye search, APIs, skills, MCP integrations, and SDKs for efficient and responsible cyberspace asset discovery.

Paste this directly into your Agent:

Read https://www.zoomeye.ai/agent.md and configure ZoomEye for this agent.

source https://www.zoomeye.ai/llms-full.txt

Search Syntax

Search Syntax Quick Reference

Use ZoomEye query syntax to describe the public-facing assets, services, components, and security signals an agent should search.

Operators

OperatorMeaningExample
=Contains or tokenized matchtitle="nginx"
==Exact case-sensitive matchtitle=="nginx"
!=Exclusioncountry="CN" && subdivisions!="Beijing"
&&Logical ANDdevice="router" && port=443
||Logical ORservice="ssh" || service="http"
()Grouping and precedence(country="US" && port=443) || country="CA"
*Wildcard inside a stringtitle="google*"

Asset identity and network

  • ip, cidr, port, protocol, hostname, domain, asn, isp

  • is_ipv4, is_ipv6, and is_domain restrict the asset type

cidr="203.0.113.0/24" && port=443
domain="example.com" && service="https"

Applications and devices

  • app, product, component, service, device, os

  • title, http.header, http.body, banner, status_code

app="Apache Tomcat" && port=8080
app="Ollama" && port=11434

TLS and certificates

  • ssl, ssl.cert.subject.cn, ssl.cert.fingerprint, ssl.jarm, ssl.ja3s

ssl.cert.subject.cn="example.com"

Vulnerability and change signals

  • vul.cve finds CVE-related exposure leads

  • is_new, is_changed, and update_time help agents reason about freshness

  • is_bugbounty and bugbounty.source help with bug bounty scope discovery

vul.cve="CVE-2021-44228"
service="https" && is_changed=true
is_bugbounty=true