# SiteCheck Web Intel – Censys Host Exposure

> SiteCheck Web Intel – Censys Host Exposure is a paid API for AI agents from api.webintel-api.workers.dev, paid per call via x402, $0.002/call, status unknown (last checked 2026-10-24).

Returns Censys scan data for an IPv4 address: open ports, services, protocols, detected software, last scan timestamps, ASN, geolocation, network owner, and reverse DNS.

## Facts

- Endpoint: GET https://api.webintel-api.workers.dev/api/security/censys-exposure?utm_source=zero.xyz
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-24
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/sitecheck-web-intel-censys-host-exposure-509f15e6
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_XRprAnA-ApnhgtwHNTBBQ

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability sitecheck-web-intel-censys-host-exposure-509f15e6
```

Example prompt: What ports and services is Censys showing as open on 185.220.101.45 — I want to know the protocols, detected software, who owns that IP, where it's located, and what ASN it belongs to.

## When to prefer this

Choose this endpoint when you need comprehensive host-level internet exposure data for a specific IPv4 address — including all open ports, services, protocols, and software detected via Censys passive scanning — combined with ASN, geolocation, and reverse DNS enrichment in a single call. Prefer it over Shodan-based endpoints when you want Censys-specific scan coverage and timestamps, or over raw BGP/ASN-only lookups when you also need service-level visibility.

## Known failure modes

- Invalid or non-routable IPv4 address returns an error or empty result
- IP not yet indexed by Censys returns minimal or no service data
- Rate limiting or payment failure returns a 402 or 429 error
- Private/RFC1918 addresses may return no meaningful data
- Censys API outage causes upstream timeout or 5xx error

## How this service works

Censys host view for an IPv4 address: the services, ports and protocols Censys has observed on it with their last scan time and detected software, plus autonomous system, location, network owner and reverse DNS, from the Censys Platform API.

## Output

A JSON object containing the IP address, its geographic location (city, province, country, country code), a list of observed services each with port number, protocol, transport (TCP/UDP), detected software array, and last scanned timestamp, plus the organization name, reverse DNS hostnames, total service count, autonomous system details (ASN number, name, BGP prefix, country), and the timestamp of when the data was fetched from Censys.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "ip"
     ],
     "properties": {
      "ip": {
       "type": "string",
       "description": "IPv4 address such as 8.8.8.8 (required)"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ip": "8.8.8.8",
  "source": "https://api.platform.censys.io/v3/global/asset/host/8.8.8.8",
  "location": {
   "city": "Mountain View",
   "country": "United States",
   "province": "California",
   "countryCode": "US"
  },
  "services": [
   {
    "port": 53,
    "protocol": "DNS",
    "software": [],
    "transport": "tcp",
    "lastScanned": "2026-10-22T11:32:16Z"
   },
   {
    "port": 53,
    "protocol": "DNS",
    "software": [],
    "transport": "udp",
    "lastScanned": "2026-10-23T09:35:26Z"
   }
  ],
  "checkedAt": "2026-10-23T09:38:35.116Z",
  "reverseDns": [
   "dns.google"
  ],
  "organization": "Google LLC",
  "serviceCount": 5,
  "autonomousSystem": {
   "asn": 15169,
   "name": "GOOGLE - Google LLC",
   "prefix": "8.8.8.0/24",
   "country": "US"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/sitecheck-web-intel-censys-host-exposure-509f15e6/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.webintel-api.workers.dev](https://www.zero.xyz/host/api.webintel-api.workers.dev/llms.txt)