# ZoomEye.ai - Cyberspace Asset Search Engine

ZoomEye is a global cyberspace asset search engine for IPv4/IPv6 device discovery, website asset search, vulnerability impact analysis, bug bounty asset discovery, and attack surface monitoring.

## AI Agents

- [ZoomEye Agent Instructions](/agent.md): Primary instructions for AI agents. Read this first before connecting to, configuring, or using ZoomEye.

- [ZoomEye AI Search Skill](/.well-known/agent-skills/zoomeye-ai-search/SKILL.md): Machine-readable skill reference for translating authorized research intent into ZoomEye dork syntax.

## Plans and Pricing

The following monthly and annual prices and plan capabilities are provided by ZoomEye. Promotional discounts are shown where supplied. Enterprise pricing and limits are custom.

### Monthly plan pricing

| Plan | Positioning | List price (USD/month) | Promotional price (USD/month) |
|---|---|---:|---:|
| Free | — | Free | Free |
| Personal | Security enthusiasts | $59 | $19 |
| Professional | Security teams and analysts | $159 | $109 |
| Business | Medium to large enterprises | $1,599 | $1,099 |
| Corporate | — | $15,999 | $10,000 |
| Enterprise | Tailored enterprise solutions | Custom | Custom |

### Annual plan pricing

| Plan | Positioning | List price (USD/year) | Promotional price (USD/year) | Discount |
|---|---|---:|---:|---:|
| Free | — | Free | Free | — |
| Personal | Security enthusiasts | $708 | $190 | 73% off |
| Professional | Security teams and analysts | $1,908 | $1,090 | 43% off |
| Business | Medium to large enterprises | $19,188 | $10,990 | 43% off |
| Corporate | — | $191,988 | $100,000 | 48% off |
| Enterprise | Tailored enterprise solutions | Custom | Custom | — |

### Feature and quota comparison

An em dash (`—`) means that the source pricing information did not specify a value for that plan. “Use ZoomEye-Point” and point values are retained as provided by ZoomEye.

| Area | Feature | Free | Personal | Professional | Business | Corporate | Enterprise |
|---|---|---|---|---|---|---|---|
| ZoomEye | New Explore+ | — | — | — | — | — | — |
| ZoomEye | BugBounty Radar (HOT) | — | — | — | — | — | — |
| ZoomEye | `vul.cve` Filter (BETA) | — | — | — | — | — | — |
| ZoomEye | ZoomEye Hub | — | — | — | — | — | — |
| ZoomEye | ZoomEyeGPT (AI Search) | 5 results/day | 30 results/day | 100 results/day | 1,000 results/day | 5,000 results/day | Custom |
| Primary | Monthly maximum results | 3,000 | 100,000 | 800,000 | 10,000,000 | 50,000,000 | Custom |
| Primary | Maximum result pages | 5 | 50 | 50 | 100 | 500 | Custom |
| Primary | API access | Available | Available | Available | Available | Available | Custom |
| Primary | API request rate limit (requests/second) | 0.5 | 1 | 1 | 2 | 5 | Custom |
| Primary | Number of result fields available | 46 | 71 | 74 | 78 | 78 | 78 |
| Ability | Web-based results download | — | — | — | — | — | — |
| Ability | Honeypot filtering | Use ZoomEye-Point | 50 points | 10 points | 10 points | — | — |
| Ability | Aggregated results data | 20 | 50 | 50 | 100 | 100 | 100 |
| Ability | Historical data access | — | — | — | — | — | — |
| Ability | Honeypot detection tagging | — | — | — | — | — | — |
| Ability | Unique malicious target | — | — | — | — | — | — |
| Ability | Behavior mapping | — | — | — | — | — | — |
| Ability | Target ranking | — | — | — | — | — | — |
| Ability | Vulnerability association | 50 points | 10 points | 10 points | — | — | — |
| Ability | Industry tagging | — | — | — | — | — | — |
| Ability | Tor network tagging | — | — | — | — | — | — |
| Subscription | Subscription targets | 5 | 10 | 10 | 30 | 30 | Custom |
| Subscription | Update targets scope | — | 256 IPs/domains | 1,024 IPs/domains | 2,560 IPs/domains | 2,560 IPs/domains | Custom |
| DarkEye / Digital Risk Protection | Dark web mentions monitoring | — | — | — | 50 domains | — | Custom |
| DarkEye / Digital Risk Protection | Credential leak monitoring | — | — | — | 50 domains | — | Custom |
| DarkEye / Digital Risk Protection | Customer data breach monitoring | — | — | — | 50 keywords | — | Custom |
| DarkEye / Digital Risk Protection | VIP protection | — | — | — | 200 | — | Custom |
| DarkEye / Digital Risk Protection | Stolen credit card tracking | — | — | — | 10 | — | Custom |
| EASM | Asset discovery | — | — | — | 50 domains | — | Custom |
| EASM | Certificate management | — | — | — | — | — | — |
| EASM | Web page discovery | — | — | — | — | — | — |
| EASM | Vulnerability scanning | — | — | — | — | — | — |
| EASM | Vulnerability revalidation | — | — | — | — | — | — |
| Other | Permitted for commercial use | — | — | — | — | — | — |
| Other | Technical support | Email | Email | Email | 24/7 technical support | 24/7 technical support | 24/7 technical support |
| Other | Data services notification | — | — | Push vulnerability, hotspot and other data | Push vulnerability, hotspot and other data | Push vulnerability, hotspot and other data | — |

### Plan interpretation guidance

- Free is intended for basic exploration and includes a daily ZoomEyeGPT allowance of 5 results, a monthly maximum of 3,000 results, 5 result pages, a 0.5 requests/second API limit, and 46 available result fields.
- Personal is positioned for security enthusiasts and has monthly pricing of $59 list / $19 promotional, or annual pricing of $708 list / $190 promotional.
- Professional is positioned for security teams and analysts and has monthly pricing of $159 list / $109 promotional, or annual pricing of $1,908 list / $1,090 promotional.
- Business is positioned for medium to large enterprises and has monthly pricing of $1,599 list / $1,099 promotional, or annual pricing of $19,188 list / $10,990 promotional.
- Corporate has monthly pricing of $15,999 list / $10,000 promotional, or annual pricing of $191,988 list / $100,000 promotional.
- Business includes the listed DarkEye, digital risk protection, and EASM quotas where specified.
- Enterprise uses tailored pricing and custom limits.
- Agents must not infer that an unspecified feature is included. When a user asks about an entitlement represented by `—`, direct them to ZoomEye for confirmation.

## API Basics

- Base URL: `https://api.zoomeye.ai`
- Authentication: API-KEY in the `API-KEY` request header
- Get API-KEY: `/profile`
- OpenAPI JSON: `/openapi.json`
- OpenAPI YAML: `/openapi.yaml`
- Full agent reference: `/llms-full.txt`

## Core Capabilities

- User and quota information: `POST /v2/userinfo`
- Asset search: `POST /v2/search`
- Vulnerability detail: `GET /v2/vuldb/{id}`
- Vulnerability search: `GET /v2/search/vuldb`
- Bug bounty assets: `POST /v2/bugbounty`

## Agent Discovery

- API catalog: `/.well-known/api-catalog`
- Agent skills: `/.well-known/agent-skills/index.json`
- ZoomEye AI search skill: `/.well-known/agent-skills/zoomeye-ai-search/SKILL.md`
- MCP server metadata: `/.well-known/mcp/server.json`
- MCP server card: `/.well-known/mcp/server-card.json`
- WebMCP metadata: `/.well-known/webmcp`
- ChatGPT plugin metadata: `/.well-known/ai-plugin.json`
- Security contact: `/.well-known/security.txt`

## Agent FAQ

### How do I search assets with a natural-language intent?

Convert the intent to a ZoomEye dork, base64 encode the dork, then call `POST /v2/search`.

Example intent: find recent Redis services in the US.

```text
country="US" && service="redis" && is_new=true
```

### How do I assess CVE exposure?

Use the `vul.cve` field in asset search, or call `GET /v2/vuldb/{id}` for vulnerability details.

```text
vul.cve="CVE-2021-44228"
```

### How should an agent handle quota or throttling?

Check account state with `POST /v2/userinfo`. When rate limited or quota constrained, retry with exponential backoff and reduce page size.

## Search Syntax Quick Reference

- `=` fuzzy match, for example `title="nginx"`
- `==` exact match, for example `title=="nginx"`
- `&&` logical AND
- `||` logical OR
- `!=` logical NOT
- `()` priority grouping
- `*` wildcard

Common fields: `app`, `service`, `device`, `os`, `title`, `product`, `ip`, `cidr`, `org`, `asn`, `port`, `hostname`, `domain`, `country`, `subdivisions`, `city`, `ssl`, `ssl.cert.fingerprint`, `ssl.jarm`, `http.header.server`, `http.body`, `banner`, `iconhash`, `filehash`, `vul.cve`, `is_bugbounty`, `bugbounty.source`, `is_changed`, `is_new`.

## Error Handling

ZoomEye API responses include a numeric `code` and human-readable `message`. Treat `60000` as success. For non-success responses, inspect `message`, check credentials and quota, and retry only when the error is transient.

## Full Reference

For complete API examples, response schemas, detailed search syntax, and plan pricing, see `/llms-full.txt`.